MODx < 2.0.3-pl modahsh Parameter XSS

The version of MODx hosted on the remote web server fails to sanitize the 'modahsh' parameter of the 'manager/index.php' script before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject arbitrary HTML an...

Internet Explorer Scroll Event Memory Corruption (MS11-081; CVE-2011-1993)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way IE accesses objects that have been deleted. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful exploitation may...

Microsoft Forefront UAG Poisoned Cup of Code Execution (MS11-079; CVE-2011-1969)

The vulnerability is due to a vulnerable Java applet that is installed on a browser by the Forefront Unified Access Gateway UAG server. A remote attacker may exploit this vulnerability by enticing a target user to open a malicious web-page using a Java-enabled Web-browser. Successful exploitation...

Adobe Flash Player Speex Codec Buffer Underflow (ASBP11-26; CVE-2011-2130)

A buffer underflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious web-page. Successful exploitation will allow an...

Adobe Reader JPEG Marker Code Execution (APSB11-24; CVE-2011-2440)

A code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error while parsing corrupted PDF files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file. Successful exploitation would allo...

FreeType PostScript Type1 Font Parsing Code Execution (CVE-2011-0226)

A code execution vulnerability has been reported in the FreeType font engine. The vulnerability is due to improper validation by the application while handling specially crafted PDF or PostScript. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially...

Oracle Secure Backup Administration Server validate_login Command Injection (CVE-2011-2261)

A command injection vulnerability has been reported in Oracle secure backup administration server. The vulnerability is due to insufficient user data filtering. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to a target user. Successful exploitation...

Oracle Outside In CorelDRAW File Parser Stack Buffer Overflow (CVE-2011-2264)

A code execution vulnerability has been reported in Oracle Outside-In. The vulnerability is due to improper bounds checking of certain values while parsing malicious CorelDRAW cdr files. A remote attacker may exploit this vulnerability by sending a malicious .cdr file to a target user. Successful...

Adobe Reader and Acrobat PDF file PICT Memory Corruption (APSB11-24; CVE-2011-2435)

A buffer overflow vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error when parsing the header of a PICT image. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file. Successful...

Adobe PDF file PCX Buffer Overflow (APSB11-24; CVE-2011-2437)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to buffer allocation error while parsing a PCX image header. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file...

Adobe Reader and Acrobat PDF file IFF RGBA Buffer Overflow (APSB11-24; CVE-2011-2436)

A heap buffer overflow vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to insufficient bounds checking while parsing an IFF image header. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file...

Adobe PDF File TIFF Buffer Overflow (APSB11-24; CVE-2011-2432)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to insufficient bounds checking while parsing certain structures in a TIFF image. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF...

Preemptive Protection against Microsoft Internet Explorer SafeHTML Cross-Site Scripting (MS11-074)

An information disclosure vulnerability has been reported in Internet Explorer. A remote attacker may exploit this vulnerability to perform cross-site scripting attacks and run script in the security context of the logged-on user...

7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)

A file execution vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to execute...

Cisco AnyConnect VPN Client ActiveX Code Execution (CVE-2011-2039)

A remote code execution vulnerability has been reported in Cisco Anyconnect VPN Client. Annyconnect provides secured remote connection software solution for PCs and mobile devices. The vulnerability exists in the application VPN client's Activex control which aids in downloading and executing its...

Siemens Tecnomatix FactoryLink SCADA VRN Server Multiple Buffer Overflows

Multiple buffer overflow vulnerabilities have been reported in Siemens Tecnomatix FactoryLink VRN Server SCADA system. The vulnerabilities are due to a boundary error in the application's VRN Server, which occurs while handling incoming message requests. A remote attacker could leverage these...

Sybase M-Business Anywhere agSoap.exe Buffer Overflow

A heap buffer overflow has been reported in Sybase M-Business Anywhere. M-Business Anywhere is a mobile applications development, deployment and management platform. The vulnerability is due to a boundary error in the server while handling specially crafted SOAP requests. A remote attacker could...

Adobe Flash Player ActionScript LoadClip Cross Site Scripting (APSB11-21; CVE-2011-2139)

A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing LoadClip requests in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing...

Adobe Flash Player ActionScript Image Scroll Code Execution (APSB11-21; CVE-2011-2138)

A code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing ActionScript image scroll functions in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web pag...

Internet Explorer Window Open Race Condition (MS11-057; CVE-2011-1257)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this issue to cause a memory corruption in a way that will enable him to execute arbitrary code in the context of the logged-on user. Successful exploitation of this vulnerabili...