CVE-2013-3854

CVE-2013-3854 affects Microsoft Office 2007 SP3 and Word 2007 SP3. The vulnerability is described as memory corruption in Word that can be triggered by a crafted Office document, enabling remote code execution or, per the description, a denial of service. The CVSSv2 base score is 9.3 (HIGH) with ...

MS13-072: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537)

The remote Windows host is running a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, or Microsoft Word Viewer that is affected by the following remote code execution vulnerabilities : - A remote code execution vulnerability exists due to the way the XML parser used by Word...

Microsoft Word CVE-2013-3854 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Microsoft Word Memory Corruption (MS13-072: CVE-2013-3854)

A remote code execution vulnerability has been reported in Microsoft Word...

CVE-2011-3854

CVE-2011-3854 affects the ZenLite WordPress theme prior to version 4.4. The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via the s parameter. Affected software is the ZenLite theme for WordPress; the root cause is an insuf...

Fedora Update for couchdb FEDORA-2011-7232

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-3854

Multiple cross-site scripting XSS vulnerabilities in the web administration interface aka Futon in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3854

CVE-2010-3854 affects Apache CouchDB Futon (web admin) from versions 0.8.0 through 1.0.1, where multiple XSS vulnerabilities permit remote script/HTML injection via unspecified vectors. Core issue: improper input handling in Futon. Impact is remote script execution in the admin interface context....

IBM Tivoli Storage Manager Client Multiple Vulnerabilities (swg21405562)

The remote host is running an IBM Tivoli Storage Manager TSM client. The version running on the remote host has one or more of the following vulnerabilities : - A remote stack-based buffer overflow in the client acceptor daemon CAD scheduler could lead to the execution of arbitrary code...

IBM DB2 Universal Database XML Query Buffer Overflow (CVE-2008-3854)

IBM DB2 Database is a relational database management system made available for Unix, Windows, and Linux platforms. The product consists of a set of services that work together to provide data processing functionalities. DB2 can be administrated from command-line tools or GUI tools. IBM DB2 runs...

CVE-2009-3854

Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager TSM 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-3854

CVE-2009-3854 affects IBM Tivoli Storage Manager Client (traditional scheduler). A buffer overflow in the client’s traditional scheduler may allow remote code execution. Affected versions: TSM client 5.3 before 5.3.6.7 and 5.4 before 5.4.2. The issue is triggered via unspecified vectors in the sc...

Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Buffer overrun in XMLQUERY and XMLEXISTS September 15th 2008 Risk Level: High Affected versions: IBM DB2 Database Server v9.1 and 9.5 on Windows platform. Remote exploitable: Yes Authentication to Database Server is need...

CVE-2008-3854

CVE-2008-3854 affects IBM DB2 UDB (DB2 9.1 before Fix Pak 5 and 9.5 before Fixpak 1). The vulnerability consists of multiple stack-based buffer overflows in XML-related SQL semantics (XMLQUERY, XMLEXISTS, XMLTABLE) and the sqlrlaka function, allowing remote attackers to cause a denial of service ...

CVE-2007-3854

CVE-2007-3854 affects Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5. The entry documents multiple unspecified vulnerabilities allowing remote authenticated users to impact system via two components: the Advanced Queuing component (DB02) and the Spatial component (DB12). The description notes th...

Modicon PLC Telnet Server Detection (SCADA)

Binary data 3854.prm...

CVE-2006-3854

Buffer overflow in IBM Informix Dynamic Server IDS 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is...

CVE-2006-3854

CVE-2006-3854 affects IBM Informix Dynamic Server (IDS) on Windows: IDS 9.40.TC7/TC8 and 10.00.TC4/TC5 are vulnerable to a buffer overflow caused by a long username that overflows a vsprintf-based error message, enabling remote arbitrary code execution. The issue is noted as stemming from an inco...

Error logging buffer overflow in Informix

NGSSoftware Insight Security Research Advisory Name: Error logging buffer overflow in Informix Systems Affected: Informix 9.40.xC7 and xC8, 10.00.xC3 and xC4 Severity: Critical Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date of Public Advisory: 2nd August 2006...

CVE-2005-3854

The CVE-2005-3854 entry describes a cross-site scripting (XSS) vulnerability in EasyPageCMS, specifically in index.php where the cat parameter can be exploited to inject arbitrary web script or HTML. The vulnerability affects the ability of remote attackers to run injected code in a user’s browse...