Lucene search
+L

5643 matches found

CVE
CVE
added 2008/10/22 9:00 p.m.45 views

CVE-2008-4699

The CVE-2008-4699 entry concerns Peachtree Accounting 2004, specifically the ActiveX control PAWWeb11.ocx. The vulnerability arises in the ExecutePreferredApplication method, enabling remote attackers to execute arbitrary programs. The available connected documents affirm this insecure method vul...

9.3CVSS7.4AI score0.27234EPSS
SaveExploits2References7Affected Software1
NVD
NVD
added 2008/10/22 12:11 a.m.18 views

CVE-2008-4652

Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...

9.3CVSS7.9AI score0.1011EPSS
SaveExploits2References5
Prion
Prion
added 2008/10/22 12:11 a.m.16 views

Buffer overflow

Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...

9.3CVSS8.5AI score0.1011EPSS
SaveExploits2References5Affected Software1
Prion
Prion
added 2008/10/22 12:11 a.m.14 views

Heap overflow

Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control QvodInsert.dll in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information...

9.3CVSS8.7AI score0.06288EPSS
SaveExploits2References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/10/22 12:00 a.m.24 views

LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities

The remote host contains the LPViewer ActiveX control, initially created by MGI Software but later taken over by Roxio and then again by iseemedia. This control reportedly has stack-based buffer overflows in its 'url', 'toolbar', and 'enableZoomPastMax' methods. If an attacker can trick a user on...

9.3CVSS6.3AI score0.28706EPSS
SaveExploits8References1
CVE
CVE
added 2008/10/22 12:00 a.m.47 views

CVE-2008-4664

CVE-2008-4664 affects QVOD Player prior to 2.1.5 build 0053, via the QvodInsert.dll ActiveX control (QvodInsert.QvodCtrl.1) where a heap-based buffer overflow can be triggered by a long URL property to allow remote code execution. Details are taken from NVD/NVD-linked references; no explicit expl...

9.3CVSS8.1AI score0.06288EPSS
SaveExploits2References4Affected Software1
OpenVAS
OpenVAS
added 2008/10/21 12:00 a.m.30 views

Hummingbird HostExplorer ActiveX Control BOF Vulnerability

This host has Hummingbird HostExplorer ActiveX Control installed and is prone to stack based buffer overflow vulnerability. The flaw is due to error in Hummingbird.XWebHostCtrl.1 ActiveX control in hclxweb.dll file when handling the 'PlainTextPassword' function, which can be exploited by assignin...

6.8CVSS0.7AI score0.06898EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2008/10/21 12:00 a.m.30 views

Hummingbird HostExplorer ActiveX Control BOF Vulnerability

Hummingbird HostExplorer ActiveX Control is prone to a stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

6.8CVSS7AI score0.06898EPSS
SaveExploits2References3
Metasploit
Metasploit
added 2008/10/19 1:15 p.m.71 views

Zenturi ProgramChecker ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system via the Zenturi ProgramChecker sasatl.dll 1.5.0.531 ActiveX Control. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

9.3CVSS7.5AI score0.32704EPSS
SaveExploits5
exploitpack
exploitpack
added 2008/10/17 12:00 a.m.18 views

Hummingbird Deployment Wizard 10 - DeployRun.dll ActiveX Control Multiple Security Vulnerabilities

Hummingbird Deployment Wizard 10 - DeployRun.dll ActiveX Control Multiple Security Vulnerabilities source: https://www.securityfocus.com/bid/31799/info Hummingbird Deployment Wizard 10 ActiveX control is prone to multiple vulnerabilities that attackers can exploit to run arbitrary code. The issue...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/10/17 12:00 a.m.34 views

Hummingbird Deployment Wizard 10 - 'DeployRun.dll' ActiveX Control Multiple Security Vulnerabilities

source: https://www.securityfocus.com/bid/31799/info Hummingbird Deployment Wizard 10 ActiveX control is prone to multiple vulnerabilities that attackers can exploit to run arbitrary code. The issues stem from insecure methods used within 'DeployRun.dll'. An attacker can exploit these issues by...

5.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/10/16 12:00 a.m.19 views

Hummingbird HostExplorer 6.2/8.0 - ActiveX Control 'PlainTextPassword()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/31783/info Hummingbird HostExplorer ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the contex...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2008/10/16 12:00 a.m.14 views

Hummingbird HostExplorer 6.28.0 - ActiveX Control PlainTextPassword() Remote Buffer Overflow

Hummingbird HostExplorer 6.28.0 - ActiveX Control PlainTextPassword Remote Buffer Overflow source: https://www.securityfocus.com/bid/31783/info Hummingbird HostExplorer ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on...

0.8AI score
SaveExploits0
seebug.org
seebug.org
added 2008/10/16 12:00 a.m.28 views

Microsoft IE componentFromPoint内存破坏漏洞(MS08-058)

BUGTRAQ ID: 31617 CVECAN ID: CVE-2008-3475 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在实现暴露给JavaScript的componentFromPoint时允许特定的对象任意控制内存访问。攻击者可以通过构建特制的网页来利用该漏洞,当用户查看网页时,该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0...

9.3CVSS6.4AI score0.39864EPSS
SaveExploits1
NVD
NVD
added 2008/10/15 10:45 p.m.16 views

CVE-2008-4586

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

9.3CVSS6.9AI score0.05165EPSS
SaveExploits2References5
NVD
NVD
added 2008/10/15 10:45 p.m.34 views

CVE-2008-4584

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

6.8CVSS6.7AI score0.04721EPSS
SaveExploits2References4
NVD
NVD
added 2008/10/15 10:45 p.m.19 views

CVE-2008-4587

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control ISDM.exe 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this...

9.3CVSS7.3AI score0.10507EPSS
SaveExploits1References6
Prion
Prion
added 2008/10/15 10:45 p.m.19 views

Design/Logic Flaw

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

9.3CVSS7.5AI score0.05165EPSS
SaveExploits2References5Affected Software1
Prion
Prion
added 2008/10/15 10:45 p.m.23 views

Security feature bypass

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

6.8CVSS7.3AI score0.04721EPSS
SaveExploits2References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2008/10/15 10:45 p.m.3 views

CVE-2008-4584

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

6.8CVSS5.8AI score0.04721EPSS
SaveExploits2References5
Rows per page
Query Builder