漏洞列表

CVE-2026-41940 · 2026-07-14 · pending_review

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control …

CVE-2024-21413 · 2026-07-15 · pending_review

Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and o…

CVE-2023-7101 · 2026-07-15 · pending_review

Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings wi…

CVE-2023-45249 · 2026-07-15 · pending_review

Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.

CVE-2021-38646 · 2026-07-15 · pending_review

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

CVE-2021-27059 · 2026-07-18 · pending_review

Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

CVE-2020-8467 · 2026-07-18 · pending_review

Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.

CVE-2020-25213 · 2026-07-18 · pending_review

WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.

CVE-2019-9978 · 2026-07-18 · pending_review

WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.

CVE-2019-18187 · 2026-07-18 · pending_review

Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.

CVE-2019-1297 · 2026-07-15 · pending_review

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.

CVE-2019-11708 · 2026-07-15 · pending_review

Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.

CVE-2018-4990 · 2026-07-15 · pending_review

Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.

CVE-2018-20250 · 2026-07-18 · pending_review

WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution

CVE-2018-0802 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is…

CVE-2018-0798 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is…

CVE-2017-8570 · 2026-07-18 · pending_review

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.

CVE-2017-11882 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.

CVE-2017-11826 · 2026-07-18 · pending_review

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in…

CVE-2017-0262 · 2026-07-18 · pending_review

A remote code execution vulnerability exists in Microsoft Office.

CVE-2017-0261 · 2026-07-18 · pending_review

Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.

CVE-2017-0199 · 2026-07-18 · pending_review

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.

CVE-2016-7193 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.

CVE-2016-3235 · 2026-07-18 · pending_review

Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote…

CVE-2015-1641 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.

CVE-2014-1761 · 2026-07-18 · pending_review

Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.

CVE-2013-0640 · 2026-07-18 · pending_review

An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.

CVE-2012-2539 · 2026-07-15 · pending_review

Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.

CVE-2012-1856 · 2026-07-18 · pending_review

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

CVE-2010-3333 · 2026-07-18 · pending_review

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

CVE-2010-2572 · 2026-07-15 · pending_review

Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.

CVE-2010-0188 · 2026-07-18 · pending_review

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.

CVE-2009-3953 · 2026-07-15 · pending_review

Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.

CVE-2009-0556 · 2026-07-14 · pending_review

Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers …

CVE-2009-0238 · 2026-07-14 · pending_review

Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed o…

CVE-2008-2992 · 2026-07-18 · pending_review

Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.

CVE-2007-0671 · 2026-07-15 · pending_review

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a mali…

CVE-2026-63030 · 2026-07-21 · pending_review

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker …

CVE-2026-60137 · 2026-07-21 · pending_review

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input …