Siemens Tecnomatix FactoryLink SCADA VRN Server Multiple Buffer Overflows

Multiple buffer overflow vulnerabilities have been reported in Siemens Tecnomatix FactoryLink VRN Server SCADA system. The vulnerabilities are due to a boundary error in the application's VRN Server, which occurs while handling incoming message requests. A remote attacker could leverage these...

Cisco AnyConnect VPN Client ActiveX Code Execution (CVE-2011-2039)

A remote code execution vulnerability has been reported in Cisco Anyconnect VPN Client. Annyconnect provides secured remote connection software solution for PCs and mobile devices. The vulnerability exists in the application VPN client's Activex control which aids in downloading and executing its...

Adobe Flash Player ActionScript LoadClip Cross Site Scripting (APSB11-21; CVE-2011-2139)

A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing LoadClip requests in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing...

Adobe Flash Player ActionScript Image Scroll Code Execution (APSB11-21; CVE-2011-2138)

A code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing ActionScript image scroll functions in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web pag...

Sybase M-Business Anywhere agSoap.exe Buffer Overflow

A heap buffer overflow has been reported in Sybase M-Business Anywhere. M-Business Anywhere is a mobile applications development, deployment and management platform. The vulnerability is due to a boundary error in the server while handling specially crafted SOAP requests. A remote attacker could...

Internet Explorer Window Open Race Condition (MS11-057; CVE-2011-1257)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this issue to cause a memory corruption in a way that will enable him to execute arbitrary code in the context of the logged-on user. Successful exploitation of this vulnerabili...

Preemptive Protection against Internet Explorer XSLT Object Memory Corruption (MS11-057; CVE-2011-1963)

A memory corruption vulnerability has been reported in an XSLT object within Microsoft Internet Explorer. A remote attacker can leverage this vulnerability to execute arbitrary code on an affected system, within the security context of the logged in user...

CGI Generic XSS (extended patterns)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected...

RealNetworks RealPlayer IVR Handling Heap Buffer Overflow

A heap buffer overflow vulnerability has been reported in RealNetworks RealPlayer. RealPlayer is a media player developed by RealNetworks, Inc. The application is capable of playing back numerous formats of multimedia files. Successful exploitation of this vulnerability may enable an attacker to...

Mambo task Parameter XSS

The version of Mambo installed on the remote host does not sanitize input to the 'task' parameter of 'index.php' when 'option' is set to 'comcontent' before using it to generate dynamic HTML. An attacker could leverage this issue to inject arbitrary HTML or script code into a user's browser to be...

Oracle Java XGetSamplePtrFromSnd Memory Corruption (CVE-2010-4462)

A memory corruption vulnerability has been reported in Oracle JRE and JDK. The vulnerability is due to an input validation error within the XGetSamplePtrFromSnd function while processing user supplied Soundbank streams. The vulnerability is triggered when Java processes malicious Soundbank stream...

Data URIs may be used to initiate cross site scripting against unrelated sites

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

Data URIs may be used to initiate cross site scripting against unrelated sites – Opera Security Advisories

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

Apache Archiva < 1.3.5 Multiple Vulnerabilities

According to its self-reported version, the instance of Apache Archiva hosted on the remote web server is earlier than 1.3.5 and thus is affected by multiple persistent and reflective cross-site scripting and cross-site request forgery vulnerabilities. If an attacker can trick a user of the...

Apple Safari WebKit Stale Pointer Use-after-free Code Execution (CVE-2010-3257)

WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP and others. A code execution vulnerability exists in Apple Safari WebKit. The vulnerability is due to a use-after-free error when processing a stale pointer...

CiscoWorks Common Services Framework Help Servlet Cross-Site Scripting Vulnerability

CiscoWorks Common Services contains a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of malformed user input supplied via URL parameters to the affected application. A...

Microsoft Office File Malformed String Parsing Buffer Overflow (MS06-038) - ver 2 (CVE-2006-1540)

Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applications and components. A memory corruption vulnerability has been reported in several Microso...

Mitel Audio And Web Conferencing 4.4.30 Cross Site Scripting

PR10-15: Multiple XSS flaws within Mitel's AWC Mitel Audio and Web Conferencing Vulnerability found: 21st July 2010 Vendor informed: 26th July 2010 Vulnerability fixed: Severity: High Description: Mitel Audio and Web Conferencing AWC are a simple, cost-effective and scalable audio and web...

Citrix Provisioning Services streamprocess.exe Stack Buffer Overflow

Citrix Provisioning Service allows computers to obtain application from the network in real-time. Administrators can prepare a master device for imaging purposes by creating a vDisk image that would be stored on a Provisioning Server. Then, this vDisk would be used by devices to boot directly fro...

PR10-17 Various XSS and information disclosure flaws within KeyFax response management system

PR10-17: Various XSS and information disclosure flaws within KeyFax response management system http://www.omfax.co.uk Vulnerability found: 25th August 2010 Vendor informed: Vulnerability fixed: Severity: Medium/High Description: KeyFax response management system provides professional management o...