The vulnerability of the microprogramming software of the Cisco ASA security device allows a remote attacker to induce a maintenance failure.

The vulnerability of the microprogramming software of the Cisco ASA security device in the XML processing module when using Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN allows a malicious actor to trigger a service failure a malfunction in the VPN operation or a system restart ...

Vulnerability in HWP document filter

US-CERT/NIST reports: The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write...

UBUNTU-CVE-2015-1774

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write...

CVE-2015-1774

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write...

UBUNTU-CVE-2015-0804

The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via a...

Microsoft Word RTF listoverridecount Memory Corruption - Ver2 (CVE-2014-1761)

A memory corruption vulnerability has been reported in Microsoft Word. The vulnerability is due to improper handling of structures when parsing a specially crafted RTF document. An attacker could exploit this vulnerability by enticing the target user to open a specially crafted RTF file. Successf...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewe...

PNMsoft Sequence Kinetics Denial of Service Vulnerability

PNMsoft Sequence Kinetics is a next-generation business process management suite released by Israel-based PNMsoft that enables rapid establishment of high-availability workflow applications and close human collaboration on change while maintaining lifecycle governance. A denial of service...

VulnCheck KEV: CVE-2015-1642

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."...

CVE-2014-6362

Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."...

Microsoft Word Memory Corruption Vulnerability (CNVD-2015-01100)

Microsoft Word is a word processing system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Word. Allows a remote attacker to execute arbitrary code or cause a denial of service memory crash via a crafted Office document...

Microsoft Word Memory Corruption Vulnerability (CNVD-2015-01101)

Microsoft Word is a word processing system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Word. Allows a remote attacker to execute arbitrary code or cause a denial of service memory crash via a crafted Office document...

Microsoft Word OneTableDocumentStream Remote Code Execution (MS15-012; CVE-2015-0065)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially craft...

Adobe Reader Acrobat Denial of Service Vulnerability

Adobe Acrobat Reader is the United States Adobe developed a very popular and excellent PDF document reading software. A denial of service vulnerability exists in Adobe Reader Acrobat, which allows remote attackers to launch denial of service attacks via a carefully crafted PDF document...

chromium-browser: use-after-free in Views

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/locationbar/zoombubbleview.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted docume...

Design/Logic Flaw

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/locationbar/zoombubbleview.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted docume...

UBUNTU-CVE-2014-7936

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/locationbar/zoombubbleview.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted docume...

CVE-2014-7936

Removed by vendor...

CVE-2014-6360

Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Global Free Remote Code Execution in Excel Vulnerability."...