ASUS Net4Switch ipswcom.dll ActiveX Control Stack Buffer Overflow

A stack buffer overflow vulnerability has been reported in ASUS Net4Switch. The vulnerability is due to a boundary error in several methods of the ipswcom.dll ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page...

libpng png_decompress_chunk Integer Overflow - ver 2 (CVE-2011-3026)

An integer overflow vulnerability has been reported in libpng, an open source implementation of the PNG specification. The vulnerability is due to a heap allocation in the function pngdecompresschunk. Remote attackers could exploit this vulnerability by sending a specially crafted PNG file to the...

Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08; CVE-2012-0774)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

XSS in Kaseya version 6.2.0.0 web interface

Summary The Kaseya version 6.2.0.0 web interface and possibly other versions is vulnerable to Cross-Site Scripting in the "adminName" variable. 2. Description By submitting malicious input such as the following, it is possible to render javascript in the security context of the Kaseya server:...

Kaseya 6.2.0.0 Cross Site Scripting

Summary The Kaseya version 6.2.0.0 web interface and possibly other versions is vulnerable to Cross-Site Scripting in the "adminName" variable. 2. Description By submitting malicious input such as the following, it is possible to render javascript in the security context of the Kaseya server:...

InduSoft Web Studio Remote Agent Buffer Overflow (CVE-2011-4052)

A remote code execution vulnerability has been reported in InduSoft Web Studio Remote Agent component. The vulnerability is due to insufficient boundary check of user supplied data using a certain operation. A remote attacker may exploit this issue by sending a specially crafted request to port...

Dolibarr Multiple Script URI XSS

The version of Dolibarr on the remote host fails to properly sanitize parameters in 'index.php' before using them to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this issue to inject arbitrary HTML and script code in a user'...

Viscom Software Image Viewer ActiveX Buffer Overflow

A buffer overflow vulnerability has been reported in Viscom Software Image Viewer. The vulnerability is due to a boundary error when handling a certain function call with an overly long parameter. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially...

Microsoft Office Drawing Object Code Execution (MS07-025; CVE-2007-1747)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to insufficient data validation by the application when parsing Office drawing objects. A remote attacker may exploit this vulnerability by enticing target users to open a specially crafted Offic...

Oracle WebCenter Content idc/idcplg Multiple Parameter XSS

Oracle WebCenter Content script '/idc/idcplg' contains several parameters that are incorrectly filtered, including 'sltPageTitle' and 'redirectPageTitle'. This makes the WebCenter Content install susceptible to a reflected cross-site scripting attack. By tricking someone into clicking on a...

Brainkeeper Enterprise Wiki 'search.php' XSS Vulnerability

Brainkeeper Enterprise Wiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nullsoft Winamp Advanced Module Format File Buffer Overflow

A remote code execution vulnerability has been reported in Nullsoft Winamp. The vulnerability is caused due to a heap buffer overflow while handling specially crafted Advanced Module Format .amf files. A remote attacker may trigger this vulnerability by enticing a user to open a specially crafted...

SQLiteManager <= 1.2.4 Multiple XSS Vulnerabilities

SQLiteManager is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP Intelligent Management Center img Buffer Overflow (CVE-2011-1848)

HP Intelligent Management Center IMC is a stand-alone, comprehensive management platform developed by HP that delivers integrated and modular network management capabilities. IMC Enterprise Edition is designed on a service-oriented architecture SOA using a business application flow model as the...

Sunway ForceControl SNMP NetDBServer Integer Signedness Buffer Overflow

A remote code execution vulnerability has been reported in Sunway ForceControl. The vulnerability is due to an error in the way the application handles length values supplied in certain Opcode requests. A remote attacker may exploit this vulnerability by sending a specially crafted request to the...

Microsoft OLE Property Code Execution (MS11-093; CVE-2011-3400)

A remote code execution vulnerability has been reported in Microsoft Object Linking and Embedding OLE. The vulnerability is due to improper handling of OLE objects in memory. A remote attacker could exploit this vulnerability by enticing a user to open a file containing a specially crafted OLE...

Microsoft Excel Record Parsing Code Execution (MS11-096; CVE-2011-3403)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to improper handling of certain records in Microsoft Excel while parsing malformed Excel files. A remote attacker could trigger the vulnerability by enticing an affected target user to open a...

Microsoft Publisher Malformed File Parsing Memory Corruption (MS11-091; CVE-2011-3412)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is due to an error in the way Microsoft Publisher handles memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to open a...

Expinion.Net Member Management System 'REF_URL' Parameter Cross-Site Scripting Vulnerability

The host is running Member Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmembermanagementsystemxssvuln.nasl 5750 2017-03-28 14:10:17Z cfi $ Expinion.Net Member Management System 'REFURL' Parameter Cross-Site Scripting Vulnerability Authors...

Citrix XenApp and XenDesktop XML Service Interface Code Execution

A remote code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to an error in the way the application processes invalid URIs. A remote attacker could exploit this vulnerability by sending a malicious packet to the target service. Successfu...