1591 matches found
Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (3038999)
This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office Suite Remote Code Execution Vulnerabilities (3038999)
This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Mozilla Firefox/Thunderbird Arbitrary File Read Vulnerability
Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An arbitrary file read vulnerability exists in Mozilla Firefox/Thunderbird, which can be exploited by an attacker to read arbitrary files in the user context of a running application...
Moodle Glossary Cross-Site Request Forgery Vulnerability
Moodle is an open source web-based teaching and learning application. A cross-site request forgery vulnerability exists in Moodle Glossary, which could be exploited by remote attackers to construct malicious URIs, trick users into parsing them, and could be used to perform malicious actions in th...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01059)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Apple Mac OS X Gatekeeper Protection Security Bypass Vulnerability
Apple Mac OS X is the latest operating system developed by Apple Inc. A security vulnerability exists in Apple Mac OS X Gatekeeper Protection, which allows attackers to bypass certain security restrictions and execute arbitrary code within the context of an affected user's application...
Odata4j: XML eXternal Entity (XXE) flaw
It was found that Odata4j permitted XML eXternal Entity XXE attacks. If a REST endpoint was deployed, a remote attacker could submit a request containing an external XML entity that, when resolved, allowed that attacker to read files on the application server in the context of the user running th...
Technicolor DT5130 Router Command Injection (CVE-2014-9144)
A command injection vulnerability has been reported in Technicolor DT5130 Router. Successful exploitation would allow an attacker to execute commands in the security context of the logged on user...
Microsoft Office CVE-2014-6364 Use After Free Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...
Microsoft Internet Explorer CVE-2014-6341 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
(0Day) Hewlett-Packard Data Protector omnidlc Buffer Overflow Remote Code Execution Vulnerabililty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within omnidlc.exe which can be called via crs.exe. The issue lies in the...
Teiid: XML eXternal Entity (XXE) flaw in SQL/XML parsing
It was found that Teiid SQL/XML permitted XML eXternal Entity XXE attacks. If a REST endpoint was deployed, a remote attacker could submit a request containing an external XML entity that, when resolved, allowed that attacker to read files on the application server in the context of the user...
Microsoft Windows Media Center Remote Code Execution Vulnerability (2978742)
This host is missing a critical security update according to Microsoft Bulletin MS14-043 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Telecom Italia DownloaderActiveX.ocx ActiveX Control Code Execution (CVE-2008-2551)
An attacker may use the vulnerable ActiveX control in order to download and execute arbitrary files in the context of the currently logged-on user...
BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass (MSF)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Adobe Flash Player 11.3 Font Parsing Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
RhinoSoft Serv-U FTP Server 3/4/5 MDTM Command Time Argument Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9751/info Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command. The problem exists due to insufficient bounds...
ASPNuke 0.80 register.asp Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14062/info ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
Unalz 0.x Archive Filename Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit this...
PY Software Active Webcam 4.3 Webserver Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9261/info A vulnerability has been reported to be present in the software that may allow a remote attacker to execute HTML or script code in a user's browser. It has been reported that the problem arises when the software...