(0Day) Oracle Data Quality DscXB onloadstatechange Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Oracle Data Quality LoaderWizard DataPreview Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Oracle Data Quality LoaderWizard SetEntities Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Schneider Electric DS-NVs Rvctl.RVControl.1 SetText Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric DS-NVs. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

WebGate Webeye ActiveX Control Stack Based Buffer Overflow Vulnerability

The WebGate 'webeye.ocx' ActiveX control installed on the remote host is affected by a stack-based buffer overflow vulnerability due to improperly processing input to the 'ipaddress' parameter. A remote attacker, using specially crafted input, can exploit this to execute arbitrary code. C Tenable...

Advantech WebAccess Webeye ActiveX Control Stack Based Buffer Overflow Vulnerability

Binary data scadaadvantechwebaccess80.nbin...

Agilent Technologies Feature Extraction AnnotationX.AnnList.1 ActiveX Control Arbitrary Code Execution Vulnerability

Agilent Technologies Feature Extraction is a set of feature extraction software for automatically reading and processing image files from multiple original chips from Agilent Technologies. A security vulnerability exists in Agilent Technologies Feature Extraction's AnnotationX.AnnList.1 ActiveX...

WebGate eDVR Manager WESPMonitor.WESPMonitorCtrl.1 ActiveX Control Memory Misreference Vulnerability

WebGate eDVR Manager is an eDVR software manager from WebGate Korea. A memory misreference vulnerability exists in the 'Connect' function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control of WebGate eDVR Manager. A remote attacker could exploit this vulnerability to execute arbitrary code via ...

WebGate WebEyeAudio ActiveX Control Stack Buffer Overflow Vulnerability

WebGate WebEyeAudio ActiveX control is a Web-based camera audio control from WebGate Korea. A stack buffer overflow vulnerability exists in the 'Connect' function in the WebGate WebEyeAudio ActiveX control. A remote attacker can exploit this vulnerability to execute arbitrary code with the help o...

HP Point of Sale PCs Running Windows with OPOS Drivers Arbitrary Code Execution Vulnerability (CNVD-2015-01597)

HP Point of Sale PCs Running Windows with OPOS Drivers is a set of OPOS drivers from Hewlett-Packard HP that run on the Windows operating system for Hewlett-Packard point-of-sale terminals. A security vulnerability exists in the OPOSCheckScanner.ocx file in various printer devices in versions pri...

Kguard SHA104 / SHA108 Bypass / Command Injection

MULTIPLE VULNERABILITIES WITH KGUARD DIGITAL VIDEO RECORDERS, February 10, 2015 PRODUCT DESCRIPTION The Kguard SHA104 & SHA108 are 4ch/8ch H.264 DVRs designed for economical application. It's stylish & streamlines hardware design and excellent performance can be fast moving, competitive and an...

CVE-2015-2092

The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."...

Design/Logic Flaw

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2093

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value...

Stack overflow

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value...

CVE-2015-2092

The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

CVE-2015-2093

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value...

CVE-2015-2095

WebGate eDVR Manager's WESPPTZ.WESPPTZCtrl.1 ActiveX control is affected by a heap-based buffer overflow in SetConnectInfo. A remote attacker can run arbitrary code by supplying crafted arguments. Concrete details from multiple sources: Affected component: WESPPTZCtrl.1 ActiveX control in WebGate...

CVE-2015-2093

CVEs and affected component : CVE-2015-2093 describes a stack-based buffer overflow in the Connect function of the WebGate WebEyeAudio ActiveX control (OCX). The vulnerability enables remote code execution in the context of the vulnerable host when a crafted value is processed.Root cause : buffer...