Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the Assurance component of Cisco Prime Collaboration could allow an unauthenticated, remote attacker to conduct several cross-site scripting XSS attacks against the user of the web interface of the affected system. The vulnerability is due to insufficient validation of user...

Splunk < 5.0.6 Unspecified XSS

According to its version number, the Splunk Web hosted on the remote web server is affected by an unspecified cross-site scripting vulnerability. An attacker can exploit this issue to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the...

Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3354; CVE-2016-0944)

A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Drupal Google Site Search Module API Data Handling XSS

The remote web server hosts a version of the Google Site Search module for Drupal that is version 6.x prior to 6.x-1.4 or 7.x prior to 7.x-1.10. It is, therefore, affected by a cross-site scripting vulnerability due to a failure to properly sanitize API data before returning it to a user. This...

SolarWinds Orion Pepco32c ActiveX Control Buffer Overflow

A heap-based buffer overflow vulnerability exists in SolarWinds Orion Server and Application Monitor. The vulnerability is due to insufficient bounds checking specific parameter of the Pepco32c control. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to visit a...

IBM Lotus Quickr qp2.cab ActiveX Control Integer Overflow (CVE-2013-3026)

A buffer overflow vulnerability exists in IBM Lotus Quickr for Domino. The vulnerability is due to an integer overflow within the qp2.cab ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a crafted web page using Internet Explorer. Successful...

MS13-055 Microsoft Internet Explorer CAnchorElement Use-After-Free

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

VLC Media Player ABC File Instruction Field Parsing Heap Overflow

A remote code execution vulnerability has been reported in the libmodplug library used by VLC Media Player. The vulnerability is due to an error while parsing Instruction fields in ABC files with the style sheet directive "MIDI drum" or "MIDI gchord". Remote attackers could exploit this...

DNN (DotNetNuke) __dnnVariable Parameter XSS

The version of DNN installed on the remote host is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input to the ' dnnVariable' parameter. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to inject arbitrary...

SAP NetWeaver SOAP Request SXPG_COMMAND_EXECUTE Command Execution

A remote command execution vulnerability has been reported in SAP NetWeaver's SOAP interface. The vulnerability is due to insufficient validation of incoming SOAP requests. A remote, authenticated attacker can exploit this vulnerability by sending a specially crafted SOAP request to the affected...

Novell iPrint Client For Windows IPP Response Stack Buffer Overflow (CVE-2013-1091)

A stack buffer overflow vulnerability exists in Novell iPrint Client. The vulnerability is due to insufficient validation of IPP responses that can lead to a stack buffer overflow. Successful exploitation can allow an attacker to execute arbitrary code on a target system in the security context o...

Internet Explorer CTreeNodeobject Use After Free (MS13-047; CVE-2013-3119)

A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error while handling certain objects when processing HTML and script code. Successful exploitation could lead to arbitrary code execution under the security context of the target user...

HP System Management Home Page Command Injection (CVE-2013-3576)

A Remote PHP Code Injection has been reported in HP System Management. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious request containing a specially crafted parameter to the target server. Successful exploitation would result...

Novell ZENworks Asset Management Directory Traversal (CVE-2011-2653)

A Directory Traversal vulnerability has been reported in the Novell ZENworks Asset Management. The vulnerability is due to insufficient input validation when parsing the FileUpload parameter. A remote attacker can exploit this issue by sending a specially crafted packet to the target server...

Splunk 5.0.x < 5.0.3 Multiple Vulnerabilities

According to its version number, the Splunk Web hosted on the remote web server is affected by multiple vulnerabilities : - The application is affected by an unspecified cross-site scripting vulnerability. An attacker can exploit this issue to inject arbitrary HTML and script code into a user's...

InduSoft Web Studio Unauthenticated Insecure Remote Operations - High Confidence (CVE-2011-4051)

A code execution vulnerability has been reported in the Remote Agent component of InduSoft Web Studio. The vulnerability is due to the absence of authentication for incoming requests to the Remote Agent service. A remote, unauthenticated attacker could exploit this vulnerability by sending crafte...

Sun Java GIF File Handling Memory Corruption - Improved Performance (CVE-2007-0243)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java is wide...

Apple QuickTime TeXML Color String Parsing Buffer Overflow - Improved Performance (CVE-2012-0663)

A stack buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to insufficient validation of a string length when processing certain elements inside QuickTime TeXML files. A remote attacker can exploit this issue by enticing a target user to open a specially...

Microsoft Exchange Server MIME Base64 Decoding Code Execution (MS07-026; CVE-2007-0213) - Improved Performance

A vulnerability exists in the way Microsoft Exchange servers process certain MIME-encoded attachments. An attacker can exploit this vulnerability for code execution in SYSTEM security context...

EMC AlphaStor Device Manager Buffer Overflow - High Confidence (CVE-2013-0930)

A stack-based buffer overflow vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to a lack of boundary checking when processing certain opcode messages in rrobotd.exe. Unauthenticated attackers can exploit this vulnerability to execute arbitrary code in the...