CA BrightStor ARCserve Backup Tape Engine Service Buffer Overflow

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration and Threat Management. There exists a...

CoolPlayer Playlist File Handling Buffer Overflow (CVE-2008-3408)

CoolPlayer is media player application capable of playing back numerous multimedia file formats. The application also handles handles playlist files such as M3U .m3u. There exists a buffer overflow vulnerability in the CoolPlayer. The vulnerability is due to a boundary error within the handlingof...

SonicWALL E-Class SSL-VPN ActiveX Control Format String Overflow

-------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...

FuseTalk categories.aspx FTVAR_SORTORDER Parameter XSS

The installed version of FuseTalk fails to sanitize user-supplied input to the 'FTVARSORTORDER' parameter in file 'categories.aspx' before using it to generate dynamic HTML content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into...

HP OpenView NNM ovwebsnmpsrv.exe Command Line Argument Buffer Overflow (CVE-2010-1961; CVE-2010-1964)

The HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerabili...

HP OpenView Network Node Manager OvJavaLocale Buffer Overflow (CVE-2010-2709)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerability h...

Sun Java Runtime Environment JPEGImageReader Heap Overflow

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...

Apple Safari Webkit CSS Charset Text Transformation Code Execution (CVE-2010-1770)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

OpenOffice RTF File Parsing Heap Buffer Overflow (CVE-2007-0245)

A buffer overflow vulnerability exists in the OpenOffice software suite. The vulnerability is due to the way OpenOffice parses specially crafted Rich Text Format RTF documents. A remote attacker could exploit this vulnerability by persuading a user to open a specially crafted RTF file, potentiall...

Microsoft Outlook Express Windows Address Book File Overflow (MS06-016; CVE-2006-0014)

Microsoft Outlook Express OE is an email, newsgroup and address book management client application. The application includes a stand-alone component called Address Book that manages the address book entries. An Address Book can contain entries for individual contacts as well as group lists that...

CA BrightStor ARCserve Backup Tape Engine RPC ReserveGroup Buffer Overflow (CVE-2006-6917)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

MediaWiki profileinfo.php 'filter' Parameter XSS

The version of MediaWiki running on the remote host is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input to the 'filter' parameter in the 'profileinfo.php' script. A remote attacker can exploit this, by tricking a user into requesting a maliciously...

MIT Kerberos V5 KAdminD klog_vsyslog Server Stack Buffer Overflow (CVE-2007-0957)

Kerberos is a protocol suite which allows for the negotiation of authenticated, and optionally encrypted, communication between two points on a network. MIT Kerberos V5 is an implementation of this protocol suite. There exists a buffer overflow vulnerability in MIT Kerberos. The vulnerability is...

Microsoft Windows Media Player Skin Decompression Code Execution (CVE-2007-3035)

Microsoft Windows Media Player WMP is a popular multi-media application bundled with recent versions of the Microsoft Windows operating system. The application supports the playback of numerous video, audio, and image formats, as well as the playback of streaming content from remote sources. To...

Microsoft Internet Explorer TextRange Object Memory Corruption (MS08-045; CVE-2008-2255)

A memory corruption vulnerability exists in the way Microsoft Internet Explorer manages text. The vulnerability is due to an integer overflow error when storing text string, which leads to memory corruption in the browser. Remote unauthenticated attackers could exploit this vulnerability by...

GStreamer QuickTime File Parsing Multiple Heap Overflows (CVE-2009-0398)

GStreamer is a pipeline based multimedia framework written in the C programming language. GStreamer allows a programmer to create a variety of media-handling components, including simple audio playback, audio and video playback, recording, streaming, and editing. The pipeline design serves as a...

GnuPG Message Packet Length Handling Integer Overflow (CVE-2006-3746)

GnuPG is an open source implementation of the OpenPGP standard. The OpenPGP standard, as defined in RFC 2440, contains information about the message-exchange packet formats used to provide encryption, decryption, signing, and key management functions. Many applications, especially email programs,...

Internet Explorer Objects Handling Memory Corruption (CVE-2008-2254)

Microsoft Internet Explorer IE is the most widely used web browser application today. The browser is capable of processing HTML, scripting languages, and interpretation of various other popular Internet specifications. There are numerous versions of the HTML standard that are interpreted by the...

CruxCMS 'txtusername' Parameter Cross Site Scripting Vulnerability

CruxCMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PR09-16: Juniper Secure Access series (Juniper IVE) Cross-Site Scripting Vulnerability

PR09-16: Juniper Secure Access series Juniper IVE XSS Vulnerability found: 12th October 2009 Severity: Medium Script injection Description: There is a Cross-site Scripting vulnerability on Juniper, IVE web interface. Procheckup has found by making a malformed request to the IVE Web interface...