CVE-2015-0140

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2015-0140

IBM SPSS Statistics 22.0 on Windows 32‑bit is affected by CVE-2015-0140 due to a vulnerable ActiveX control in the SPSS Statistics ActiveX component. A remote attacker can cause arbitrary code execution by forcing a user to render a specially crafted HTML page, potentially compromising the system...

IBM SPSS Statistics ActiveX Control Code Execution Vulnerability

IBM SPSS Statistics is a suite of statistical analysis software that helps organizations address the entire analytics process, from planning and data collection to analysis, reporting, and deployment. A code execution vulnerability exists in the ActiveX control of IBM SPSS Statistics version 22.0...

Microsoft Visual Basic VBE6.DLL Stack Memory Corruption (MS10-031) - Ver2 (CVE-2010-0815)

Microsoft Visual Basic VBA is a technology for developing client desktop packaged applications and integrating them with existing data and systems. Microsoft Office products include VBA and make use of VBA to perform certain functions. A remote code execution vulnerability has been reported in th...

Ca eTrust PestPatrol Antispyware ActiveX Buffer Overflow106 - Ver2 (CVE-2009-4225)

A buffer overflow vulnerability has been reported in Ca Etrust Pestpatrole Ppctl.dll Activex and Computer Associates eTrust PestPatrol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

Microsoft Visual Studio WMI Object Code Execution (MS06-073) - Ver2 (CVE-2006-4704)

A remote code execution vulnerability exists in Microsoft Visual Studio 2005. Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications,...

ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net

Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...

Green Alliance: the online banking security controls remote code execution vulnerability analysis V1. 2-vulnerability warning-the black bar safety net

5 on 1 1 December, nsfocus Threat Response Center reported the storm clouds announcement, ICBC security controls can lead to remote arbitrary code execution vulnerability, Tick-2 0 1 5-9 6 3 3 9, and considering the Internet financial current there are more security issues, and taking into accoun...

Oracle Data Quality DscXB onloadstatechange Memory Misreference Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in the TSS12.LoaderWizard.lwctrl...

Oracle Data Quality LoaderWizard DataPreview Type Obfuscation Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in the TSS12.LoaderWizard.lwctrl...

Oracle Data Quality TSS12.DscXB.XB ActiveX Control Memory Misreference Vulnerability

Oracle Data Quality is a suite of software that provides a comprehensive data quality management environment. A memory misreference vulnerability in the onloadstatechange method of the TSS12.DscXB.XB ActiveX control in Oracle Data Quality allows remote attackers to construct a malicious WEB page...

Oracle Data Quality LoaderWizard SetEntities Type Obfuscation Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in Oracle Data Quality's...

Schneider Electric OPC Factory Server (OFS) < 3.5 SP1 ActiveX Object Multiple Buffer Overflows DoS

Binary data scadaopcfactoryserveractivex.nbin...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Multiple Vulnerabilities in Clever Internet ActiveX Suite CLINetSuiteX6.OCX

ActiveX controls, formerly called OLE controls or OCX controls, are software components or objects that can be inserted into Web pages or other applications. An arbitrary file download and overwrite vulnerability exists in Clever Internet ActiveX Suite CLINetSuiteX6.OCX. The vulnerability could b...

Moxa SoftCMS RTSPVIDEO.rtspvideoCtrl.1 ActiveX Stack Buffer Overflow Vulnerability

Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. A stack buffer overflow vulnerability exists in the RTSPVIDEO.rtspvideoCtrl.1 ActiveX control o...