Exploitdb Exploits
31,332 exploits tracked across all sources.
Joomla! Component Most Wanted Real Estate 1.1.0 - SQL Injection
by Ihsan Sencan
Joomla! Component Joomloc-Lite 1.3.2 - 'site_id' SQL Injection
by Ihsan Sencan
Joomla! Component Joomloc-CAT 4.1.3 - 'ville' SQL Injection
by Ihsan Sencan
Joomla! Component Google Map Store Locator 4.4 - SQL Injection
by Ihsan Sencan
Joomla! Component Bazaar Platform 3.0 - SQL Injection
by Ihsan Sencan
Joomla! Component WMT Content Timeline 1.0 - 'id' SQL Injection
by Ihsan Sencan
Joomla! Component Team Display 1.2.1 - 'filter_category' SQL Injection
by Ihsan Sencan
Joomla! Component Groovy Gallery 1.0.0 - SQL Injection
by Ihsan Sencan
Artifex Mupdf - Out-of-Bounds Write
Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via a crafted image.
by Agostino Sarubbo
CVSS 7.8
WordPress Plugin Corner Ad 1.0.7 - Cross-Site Scripting
by Atik Rahman
Joomla! Component Spider FAQ Lite 1.3.1 - SQL Injection
by Ihsan Sencan
Joomla! Component Spider Facebook 1.6.1 - SQL Injection
by Ihsan Sencan
Joomla! Component Spider Catalog Lite 1.8.10 - SQL Injection
by Ihsan Sencan
Joomla! Component Spider Calendar Lite 3.2.16 - SQL Injection
by Ihsan Sencan
Nvidia Gpu Driver - Improper Input Validation
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential escalation of privileges
by Google Security Research
CVSS 7.8
Nvidia Gpu Driver - Memory Corruption
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.
by Google Security Research
CVSS 7.8
Microsoft Windows 10 - Information Disclosure
gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220.
by Google Security Research
CVSS 5.5
Gomlab Gom Player - Memory Corruption
GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file.
by Peter Baris
CVSS 7.8
Joomla! Component JSP Store Locator 2.2 - 'id' SQL Injection
by Ihsan Sencan
Coppermine Gallery < 1.5.44 - Directory Traversal
by Hacker Fantastic
By Source