9587 matches found
Security Update for the 2007 Microsoft Office System (KB982331)
A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for the 2007 Microsoft Office System (KB982312)
A security vulnerability exists in the 2007 Microsoft Office System and the Compatibility Pack for the 2007 Office system that could allow remote code execution. This update resolves that vulnerability...
Memory corruption
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...
PT-2010-2965 · Microsoft · Internet Explorer 8 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 versions SP1 through SP3 Description: A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploit...
PT-2010-2966 · Microsoft · Internet Explorer 8 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 versions SP1 through SP3 Description: A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploit...
Microsoft Excel 'DBQueryExt' ActiveX Data Object (ADO) Parsing Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...
CVE-2010-2191
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...
Gartner to Businesses: Eliminate Windows XP by 2012
As Microsoft prepares to pull the plug on support for Windows XP SP2, a move that stops the release of security updates for that operating system, research firm Gartner is urging businesses to start planning and testing Windows 7 this year with a plan to completely eliminate Windows XP by the end...
IBM DB2 9.1 < 9.1 Fix Pack 10 Multiple Vulnerabilities
Binary data 5749.prm...
IBM DB2 9.7 < 9.7 Fix Pack 2 Multiple Vulnerabilities
Binary data 5556.prm...
IBM WebSphere Application Server Long Filename Information Disclosure Vulnerability
IBM WebSphere Application Server WAS is prone to an information- disclosure vulnerability. Exploiting this issue may allow an attacker to access sensitive information that may aid in further attacks. This issue affects WAS 6.0, 6.1, and 7.0. OpenVAS Vulnerability Test $Id: gbibmwebsphere40277.nas...
End of Support for XP SP2 is End of an Era
Microsoft’s announcement this week that it is preparing to end support for machines running Windows XP SP2 not only represents a challenge for the thousands of businesses still running SP2, but also is the end of an era for both Microsoft and its customers. By the time Microsoft drops support for...
DSquare Exploit Pack: D2SEC_HPLR
Name| d2sechplr ---|--- CVE| CVE-2010-1549 Exploit Pack| D2ExploitPack Description| HP Mercury LoadRunner Agent Remote Code Execution Vulnerability Notes|...
IBM DB2 9.1 < Fix Pack 9 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - The 'MODIFIED SQL DATA' table function is not dropped when a definer loses required privileges to maintain the objects. IZ46773 - A privilege escalation...
HP Digital Imaging (hpodio08.dll) Insecure Method Exploit
Exploit for windows platform in category remote exploits ========================================================= HP Digital Imaging hpodio08.dll Insecure Method Exploit ========================================================= Exploit Title: HP Digital Imaging hpodio08.dll Insecure Method Explo...
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution 981160 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office...
vBulletin "Cyb - Advanced Forum Statistics" DOS
No description provided by source. Exploit Title: vBulletin "Cyb - Advanced Forum Statistics" DOS Date: 10-4-2010 Author: Andhra Hackers Software Link: Version: Web Application Tested on: Apcahe/Unix CVE : if exists Code : PHP crashes existed from a long time back and there were several issues...
DSquare Exploit Pack: D2SEC_CAXOSOFT
Name| d2seccaxosoft ---|--- CVE| CVE-2010-1223 Exploit Pack| D2ExploitPack Description| CA XOsoft Control Service entrypoint.aspx Remote Stack Overflow Vulnerability Notes|...
IBM WebSphere Application Server 7.0 < Fix Pack 9
IBM WebSphere Application Server 7.0 before Fix Pack 9 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - An unspecified cross-site scripting vulnerability in the Administration Console. PK97376 - An error when defining a wsadmin scripting...
IBM WebSphere Application Server 6.0 < 6.0.2.19 HTTP Response Splitting
IBM WebSphere Application Server 6.0.x before Fix Pack 19 appears to be running on the remote host. Such versions are reportedly affected by an HTTP response splitting vulnerability because the application fails to properly sanitize user-supplied data to an unspecified parameter and script. C...