Oracle Database DBMS_JVM_EXP_PERMS System Command Execution (CVE-2010-0866; CVE-2010-0867)

Oracle Database server is an enterprise-level relational database application suite. A privilege escalation vulnerability exists in Oracle Database server that can allow users with limited privileges to execute arbitrary operating system commands on a target server. The vulnerability is due to an...

HP OpenView Storage Data Protector Stack Buffer Overflow (CVE-2007-2280)

HP OpenView Storage Data Protector is a cross-platform backup solution for Windows, Unix and Linux operating systems. The Data Protector environment consists of various components and processes: Cell Manager, OmniInet, backup agents, and backup device servers. A buffer overflow vulnerability has...

HP OpenView Storage Data Protector Cell Manager Heap Buffer Overflow (CVE-2007-2281)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...

Sun Java System Web Server WEBDAV Stack Buffer Overflow (CVE-2010-0361)

Sun Microsystems' Java System Web Server is a high performance web server for medium to large business applications. It is available for all major platforms and supports Java, PHP, CGI and ColdFusion technologies. A stack buffer overflow vulnerability exists in Sun Java System Web Server. The...

Ektron CMS400.NET 'workarea/reterror.aspx' info Parameter XSS

The installed version of Ektron CMS400.NET fails to sanitize user- supplied input to the 'info' parameter in the 'workarea/reterror.aspx' script before using it to generate dynamic HTML content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or...

CGI Generic XSS (HTTP Headers)

The remote web server hosts CGI scripts that fail to adequately sanitize HTTP headers of malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected site. Note that...

Microsoft Windows Explorer Search-ms File Parsing Code Execution (MS08-038; CVE-2008-1435)

There exists a code execution vulnerability in Microsoft Windows Explorer. The vulnerability is due to insecure design in the way Microsoft Windows Explorer parses and saves saved-search.search-ms files. Unauthenticated remote attackers can exploit this vulnerability by enticing the target user t...

VMware WebAccess Multiple Vulnerabilities - Linux

VMWare Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Yahoo! Messenger Webcam ActiveX Control Stack Buffer Overflow (CVE-2007-3147; CVE-2007-3148)

Yahoo! Messenger is an instant messaging communicating application developed by Yahoo! Inc. One of the features that Yahoo! Messenger provides is the ability to send and receive video content. The Yahoo! Webcam ActiveX controls shipped with Yahoo! Messenger is used to handle the video data in a...

Novell eDirectory LDAP NULL Search Parameter Buffer Overflow (CVE-2008-1809)

Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. The eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. There exists a heap buffer overflow vulnerability in Novell eDirectory. The flaw is due to an incorrect calculation when...

Sun JDK Hard Coded Image in Java File (CVE-2007-2788)

Java Technology is a programming platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is widely used for web applications in numerous forms, one of which are Java Applets. The Java Development Kit JDK is a Sun...

Mozilla Firefox ClearTextRun Function Memory Corruption (CVE-2009-1313)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow (CVE-2007-4880)

IBM Tivoli Storage Manager TSM is a backup solution which is meant to protect data from failures and other errors by storing backups and archiving data. The product is available for multiple platforms and various hardware architectures. The Tivoli Storage Manager backup client is composed of...

IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...

Apple QuickTime for Java toQTPointer Function Memory Corruption (CVE-2007-2175)

Apple QuickTime is a multi-platform, industry-standard, multimedia software architecture. It is used by software developers, hardware manufacturers, and content creators to author and publish multiple media documents. Java is an object-oriented language that includes a set of libraries that...

Microsoft Exchange Server Buffer Overflow (CVE-2005-0560)

Microsoft Exchange Server is a messaging and collaboration server. It is an extensive application designed to provide email and scheduling capabilities for medium to large organizations. The server has the capability to communicate with email clients and other servers using the SMTP protocol. A...

Mozilla Firefox XBL Event Handler Tags Removal Memory Corruption (CVE-2007-5339)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, Javascript, various graphics formats, and so on. The browser runs on...

GNOME Project libxslt Library RC4 Key String Buffer Overflow (CVE-2008-2935)

XSLT is an XML language to define transformation for XML. XSLT is designed for use as part of XSL, which is a stylesheet language for XML. In addition to XSLT, XSL includes an XML vocabulary for specifying formatting. There exists a heap based buffer overflow vulnerability in RC4 libxslt...

Microsoft Internet Explorer 'VBScript' RCE Vulnerability

Internet Explorer and VBScript are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Jet Engine MDB File Parsing Buffer Overflow (CVE-2007-6026)

Microsoft Office Access, previously known as Microsoft Access, is a relational database management system from Microsoft which combines the relational Microsoft Jet Database Engine with a graphical user interface and software development tools. There exists a buffer overflow vulnerability in...