3590 matches found
VulnCheck KEV: CVE-2012-0159
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.104...
CVE-2014-9456
creationtimestamp| type| source ---|---|--- 2014-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35589...
Exploit for Code Injection in Microsoft
ExploitRemotingService c 2014 James Forshaw ==================...
BELL-CVE-2014-8709 CVE-2014-8709 does not affect BellSoft software
Bulletin has no description...
PT-2014-1744
Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1 Description A vulnerability ...
FileMaker Pro vulnerable to cross-site scripting
Overview FileMaker Pro contains an "Instant Web Publishing" function. When this function is enabled, FileMaker Pro is vulnerable to cross-scripting. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-3640. Impact An arbitrary script may be executed on the user's web browser...
PT-2014-4971 · Cobham · Cobham Sailor 6000
Name of the Vulnerable Software and Affected Versions: Cobham Sailor 6000 satellite terminals affected versions not specified Description: The issue concerns hardcoded Tbus 2 credentials in Cobham Sailor 6000 satellite terminals. This allows remote attackers to obtain access via a TBUS2 command...
CVE-2014-4937
creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39251...
CVE-2014-1442
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...
CVE-2012-1366
Cisco IOS before 15.11SY on ASR 1000 devices, when Multicast Listener Discovery MLD tracking is enabled for IPv6, allows remote attackers to cause a denial of service device reload via crafted MLD packets, aka Bug ID CSCtz28544...
CVE-2013-3862
Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...
CVE-2013-3854
Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3853...
CVE-2013-0810
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability."...
CVE-2012-5378
creationtimestamp| type| source ---|---|--- 2013-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28130...
PT-2013-1000 · D Link · Dsr-500N +6
Name of the Vulnerable Software and Affected Versions: D-Link DSR-1000 versions prior to firmware 1.08B77 D-Link DSR-1000N versions prior to firmware 1.08B77 D-Link DSR-150 versions prior to firmware 1.08B44 D-Link DSR-150N versions prior to firmware 1.05B64 D-Link DSR-250 versions prior to...
CVE-2013-2852
creationtimestamp| type| source ---|---|--- 2013-06-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38559...
mysql: unspecified vulnerability related to Server Locking (CPU April 2013)
Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Server Locking...
OpenJDK: JAXP missing security restrictions (JAXP, 6657673)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX...
OpenJDK: image processing vulnerability (2D, 8007617)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...