Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3038314)

This host is missing a critical security update according to Microsoft Bulletin MS15-032. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VulnCheck KEV: CVE-2015-1641

Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user...

WordPress AB Google Map Travel (AB-MAP) plugin cross-site request forgery vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress AB Google Map Travel is a wordpress plugin for Google Maps. WordPress AB Google Map Travel suffers from a...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Request Forgery Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A cross-site request forgery vulnerability exists in the McAfee Data Loss Prevention Endpoint DLPe epo extension, which allows remote attackers to construct malicious...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Suite Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mozilla Firefox/Thunderbird Arbitrary File Read Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An arbitrary file read vulnerability exists in Mozilla Firefox/Thunderbird, which can be exploited by an attacker to read arbitrary files in the user context of a running application...

Moodle Glossary Cross-Site Request Forgery Vulnerability

Moodle is an open source web-based teaching and learning application. A cross-site request forgery vulnerability exists in Moodle Glossary, which could be exploited by remote attackers to construct malicious URIs, trick users into parsing them, and could be used to perform malicious actions in th...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01059)

Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...

Apple Mac OS X Gatekeeper Protection Security Bypass Vulnerability

Apple Mac OS X is the latest operating system developed by Apple Inc. A security vulnerability exists in Apple Mac OS X Gatekeeper Protection, which allows attackers to bypass certain security restrictions and execute arbitrary code within the context of an affected user's application...

Odata4j: XML eXternal Entity (XXE) flaw

It was found that Odata4j permitted XML eXternal Entity XXE attacks. If a REST endpoint was deployed, a remote attacker could submit a request containing an external XML entity that, when resolved, allowed that attacker to read files on the application server in the context of the user running th...

Technicolor DT5130 Router Command Injection (CVE-2014-9144)

A command injection vulnerability has been reported in Technicolor DT5130 Router. Successful exploitation would allow an attacker to execute commands in the security context of the logged on user...

Microsoft Office CVE-2014-6364 Use After Free Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

Microsoft Internet Explorer CVE-2014-6341 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

(0Day) Hewlett-Packard Data Protector omnidlc Buffer Overflow Remote Code Execution Vulnerabililty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within omnidlc.exe which can be called via crs.exe. The issue lies in the...

Teiid: XML eXternal Entity (XXE) flaw in SQL/XML parsing

It was found that Teiid SQL/XML permitted XML eXternal Entity XXE attacks. If a REST endpoint was deployed, a remote attacker could submit a request containing an external XML entity that, when resolved, allowed that attacker to read files on the application server in the context of the user...

Microsoft Windows Media Center Remote Code Execution Vulnerability (2978742)

This host is missing a critical security update according to Microsoft Bulletin MS14-043 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Telecom Italia DownloaderActiveX.ocx ActiveX Control Code Execution (CVE-2008-2551)

An attacker may use the vulnerable ActiveX control in order to download and execute arbitrary files in the context of the currently logged-on user...

ASPNuke 0.80 register.asp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14062/info ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

Microsoft Windows XP Self-Executing Folder Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10363/info A vulnerability has been reported in Microsoft Windows XP that may cause malicious code to run in the context of the currently logged-in user. The flaw exists in Windows Explorer and may allow executable conten...