Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2015/07/30 12:00 a.m.44 views

BIOS implementations fail to properly set UEFI write protections after waking from sleep mode

Overview Multiple BIOS implementations fail to properly set write protections after waking from sleep, leading to the possibility of an arbitrary BIOS image reflash. Description According to Cornwell, Butterworth, Kovah, and Kallenberg, who reported the issue affecting certain Dell client systems...

7.2CVSS5.5AI score0.00765EPSS
SaveExploits0References3
CERT
CERT
added 2014/12/12 12:00 a.m.44 views

Honeywell OPOS suite Stack Buffer Overflow vulnerability

Overview The Honeywell OPOS OLE for Retail Point-of-Sale POS Suite is vulnerable to a stack buffer overflow attack. Description The Honeywell OPOS Suite provides a standard programming interface that allows POS hardware to be easily integrated into retail POS systems based on Microsoft Windows...

7.5CVSS7.5AI score0.04747EPSS
SaveExploits0References3
CERT
CERT
added 2014/10/08 12:00 a.m.44 views

IBM WebSphere Application Server contains multiple vulnerabilities

Overview IBM WebSphere Application Server, including the Hypervisor Edition, contains cross-site scripting and cross-site request forgery vulnerabilities. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-4770IBM WebSphere Applicatio...

6CVSS5.4AI score0.01932EPSS
SaveExploits0References3
CERT
CERT
added 2013/11/04 12:00 a.m.44 views

Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution

Overview The Attachmate Verastream Host Integrator VHI is vulnerable to arbitrary file uploads and execution. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' - CVE-2013-3626The Attachmate VHI Session Server, on all platforms, allows unauthenticated...

9.3CVSS7.1AI score0.02778EPSS
SaveExploits0References2
CERT
CERT
added 2013/04/19 12:00 a.m.44 views

avast! Mobile Security Android application denial-of-service vulnerability

Overview avast! Mobile Security Android application version 2.0.3587, and possibly earlier versions, contains a denial-of-service vulnerability. Description avast! Mobile Security version 2.0.3587 crashes if an Intent is sent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with...

1.9CVSS6.3AI score0.00359EPSS
SaveExploits0References1
CERT
CERT
added 2013/03/20 12:00 a.m.44 views

Askiaweb survey application contains multiple vulnerabilities

Overview The Askiaweb survey application contains multiple vulnerabilities. Description The Askiaweb survey application contains multiple vulnerabilities.CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2013-0123 The administration interface for the...

7.5CVSS6.9AI score0.01468EPSS
SaveExploits0References3
CERT
CERT
added 2012/05/29 12:00 a.m.44 views

AutoFORM PDM Archive contains multiple vulnerabilities

Overview AutoFORM PDM Archive contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description According to AutoFORM's website AutoFORM PDM Archive is a comprehensive output management solution that encompasses document...

6.5CVSS8.1AI score0.01574EPSS
SaveExploits0References4
CERT
CERT
added 2012/05/25 12:00 a.m.44 views

dotCMS template permissions allow arbitrary code execution

Overview The dotCMS content management system version 1.9 and possibly earlier versions, contains a vulnerability that allows users with the appropriate permissions to create a malicious template with arbitrary code. Description An authenticated dotCMS user with the permissions required to author...

6CVSS6.9AI score0.0219EPSS
SaveExploits1References5
CERT
CERT
added 2011/11/04 12:00 a.m.44 views

Microsoft Windows TrueType font parsing vulnerability

Overview A vulnerability in the Microsoft Windows TrueType font parsing component could allow an attacker to run arbitrary code in kernel mode. This vulnerability is reportedly being exploited by malicious software in the wild known as Duqu. Description The Microsoft Windows kernel includes a...

9.3CVSS6.5AI score0.78285EPSS
SaveExploits1References1
CERT
CERT
added 2011/07/15 12:00 a.m.44 views

HP ArcSight Connector Appliance XSS vulnerability

Overview ArcSight Connector Appliance v6.0.0.60023.2, and possibly previous versions, contains a module which is vulnerable to cross site scripting XSS. Description Windows Event Log SmartConnector, a component of ArcSight Connector Appliance v6.0.0.60023.2 does not sanitize all input fields. As ...

4.3CVSS5.7AI score0.03503EPSS
SaveExploits0
CERT
CERT
added 2011/05/31 12:00 a.m.44 views

Imperva SecureSphere management GUI contains an XSS vulnerability

Overview An XSS vulnerability exists in the Imperva SecureSphere management GUI. Description Dell SecureWorks' SWRX-2011-001 advisory states:"A vulnerability exists in Imperva SecureSphere due to improper validation of user-controlled input. User-controllable input is not properly sanitized for...

4.3CVSS5.9AI score0.01248EPSS
SaveExploits0References3
CERT
CERT
added 2011/05/06 12:00 a.m.44 views

Samsung Data Management Server vulnerable to SQL injection

Overview The Samsung Integrated Management System DMS is used to manage several air conditioning units. The DMS contains a built-in web server that is susceptible to SQL injection attacks. Description The DMS application's authentication form can be bypassed with SQL injection attacks. Versions...

7.5CVSS7.4AI score0.01779EPSS
SaveExploits0References6
CERT
CERT
added 2010/04/02 12:00 a.m.44 views

Oracle Sun Java fails to properly validate Java applet signatures

Overview Oracle Sun Java fails to properly validate Java applet signatures, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Signed Java applets have the ability to perform actions outside of the traditional Java sandbox, including...

7.5CVSS9.4AI score0.03337EPSS
SaveExploits0References4
CERT
CERT
added 2010/03/25 12:00 a.m.44 views

Broadcom NetXtreme management firmware ASF buffer overflow

Overview A buffer overflow vulnerability exists in the Broadcom NetXtreme management firmware. This vulnerability may allow a remote attacker to execute arbitrary code on an affected device. Description The Alert Standard Format ASF Specification is a protocol developed by Distributed Management...

10CVSS8.3AI score0.0651EPSS
SaveExploits0References3
CERT
CERT
added 2009/12/09 12:00 a.m.44 views

DISA UNIX SRR scripts execute untrusted programs as root

Overview The Defense Information Systems Agency DISA UNIX Security Readiness Review SRR scripts find1 and execute -exec various programs to obtain version information. The SRR scripts are designed to be run as root. An attacker who can write a file under the root file system may be able to exploi...

9.3CVSS6.9AI score0.01691EPSS
SaveExploits1References5
CERT
CERT
added 2008/03/12 12:00 a.m.44 views

Microsoft Office Web Components Spreadsheet ActiveX control URL parsing stack buffer overflow

Overview The Microsoft Office Web Components ActiveX controls contain a stack buffer overflow in the processing of URLs, which allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office Web Components are ActiveX controls that provide...

9.3CVSS6.7AI score0.4014EPSS
SaveExploits6References3
CERT
CERT
added 2008/01/31 12:00 a.m.44 views

Liferay Portal Forgot Password User-Agent HTTP header XSS

Overview Liferay Portal contains a cross-site scripting vulnerability in the handling of the User-Agent HTTP header, which can allow a remote, authenticated attacker to inject content into "Forgot Password" emails. Description Liferay Portal is an enterprise portal solution that uses Java...

2.6CVSS5.5AI score0.01212EPSS
SaveExploits0References2
CERT
CERT
added 2008/01/25 12:00 a.m.44 views

inet_network() off-by-one buffer overflow

Overview The inetnetwork resolver function contains an off-by-one buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The inetnetwork function takes a character string representation for an internet address and returns...

10CVSS7.9AI score0.123EPSS
SaveExploits1References7
CERT
CERT
added 2007/10/05 12:00 a.m.44 views

Sun Java JRE vulnerable to unauthorized network access

Overview The Sun Java Runtime Environment JRE contains a vulnerability that may allow unintended access to network resources. Description The Sun Java Runtime Environment JRE allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for multiple...

4CVSS6.1AI score0.03418EPSS
SaveExploits0References4
CERT
CERT
added 2007/09/06 12:00 a.m.44 views

Earth Resource Mapping NCSView ActiveX control stack buffer overflows

Overview The Earth Resource Mapping NCSView ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Earth Resource Mapping NCSView ActiveX control, which is provided by...

9.3CVSS7.3AI score0.06628EPSS
SaveExploits0References4
CERT
CERT
added 2007/07/11 12:00 a.m.44 views

Microsoft Windows Active Directory fails to properly validate client sent LDAP requests

Overview Microsoft Windows Active Directory fails to properly validate client-sent LDAP requests and may result in a denial of service condition. Description Microsoft Windows Active Directory contains a vulnerability in the way that the LDAP service validates the number of convertible attributes...

5CVSS6.2AI score0.39668EPSS
SaveExploits1References1
CERT
CERT
added 2007/05/30 12:00 a.m.44 views

Sun Java System Web Proxy Server fails to properly process malformed packets

Overview A vulnerability in the way Sun Java System Web Proxy Server processes malformed packets may allow execution of arbitrary code. Description SOCKS is a network protocol that provides a framework that allows client-server applications to securely use network firewall services. A vulnerabili...

10CVSS7.4AI score0.25703EPSS
SaveExploits4References3
CERT
CERT
added 2007/03/06 12:00 a.m.44 views

Apple QuickTime 3GP integer overflow

Overview A vulnerabilty in the way Apple QuickTime processes 3GP files may allow execution of arbitrary code. Description A vulnerability exists in the way Apple QuickTime handles specially crafted 3GP files. According to Apple QuickTime 7.1.5 security document 305149:An integer overflow exists i...

9.3CVSS7AI score0.05856EPSS
SaveExploits1References6
CERT
CERT
added 2007/02/15 12:00 a.m.44 views

Mozilla browsers "location.hostname" cross-domain vulnerability

Overview Mozilla-based browsers contain a cross-domain vulnerability, which may allow an attacker to access data in other sites. Description Mozilla uses a same origin security model to maintain separation between browser frames from different sources. This model is designed to prevent code in on...

7.5CVSS9.2AI score0.12144EPSS
SaveExploits7References26
CERT
CERT
added 2007/01/19 12:00 a.m.44 views

Adobe Acrobat allows pointer overwrite via specially crafted PDF file

Overview Adobe Acrobat and Adobe Reader fail to properly handle a specially crafted PDF file, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Adobe Acrobat and Adobe Reader are applications designed to create and view Portable Document Format PDF...

9.3CVSS7.2AI score0.09155EPSS
SaveExploits0References8
CERT
CERT
added 2007/01/18 12:00 a.m.44 views

Mozilla products vulnerable to privilege escalation via a JavaScript watch() function

Overview A vulnerability exists in Mozilla products that may allow a remote attacker to gain elevated privileges. Description Mozilla products contain a vulnerability in the way the JavaScript watch function is handled that may result in privilege escalation. According to the Mozilla Foundation...

6.8CVSS6.2AI score0.0292EPSS
SaveExploits0References13
CERT
CERT
added 2006/12/20 12:00 a.m.44 views

Mozilla SVG memory corruption vulnerability

Overview Mozilla products contain a memory corruption vulnerability related to SVG processing. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Scalable Vector Graphics SVG processing code in Mozilla Firefox and SeaMonke...

9.3CVSS6.7AI score0.08666EPSS
SaveExploits0References14
CERT
CERT
added 2006/11/16 12:00 a.m.44 views

Sky Software FileView ActiveX control buffer overflow vulnerability

Overview The Sky Software FileView ActiveX control contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Sky Software FileView object is an ActiveX control that is provided with several...

7.1AI score
SaveExploits0References4
CERT
CERT
added 2006/10/02 12:00 a.m.44 views

Apple QuickDraw Manager fails to properly handle malicious PICT images

Overview A vulnerability exists in how Apple OS X handles PICT images. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code, or create a denial-of-service condition. Description From Apple,Certain applications invoke an unsupported QuickDraw operatio...

5.1CVSS7.3AI score0.02794EPSS
SaveExploits0References3
CERT
CERT
added 2006/09/22 12:00 a.m.44 views

Apple AirPort wireless drivers vulnerable to integer overflow

Overview An integer overflow exists in the Apple AirPort wireless drivers. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, or create a denial-of-service condition. Description According to Apple,An integer overflow exists in the AirPort wireless...

7.2CVSS7.7AI score0.00498EPSS
SaveExploits0References2
CERT
CERT
added 2006/08/21 12:00 a.m.44 views

BlackBerry Enterprise Server fails to properly handle Microsoft Word attachments

Overview A buffer overflow vulnerability in BlackBerry Enterprise Server may allow a remote attacker to execute arbitrary code. Description A buffer overflow vulnerability exists in the BlackBerry Attachment Service component of BlackBerry Enterprise Server. This vulnerability may allow a remote...

5.1CVSS7.3AI score0.02717EPSS
SaveExploits0References2
CERT
CERT
added 2006/07/27 12:00 a.m.44 views

Mozilla products contain a race condition

Overview Mozilla products contain a race condition. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Mozilla products JavaScript garbage collection process may delete a variable while that variable is still in use. This may corrupt...

5.1CVSS6.8AI score0.0446EPSS
SaveExploits0References6
CERT
CERT
added 2006/05/04 12:00 a.m.44 views

Juniper Networks IVE client ActiveX control buffer overflow

Overview The ActiveX control used by Juniper IVE OS devices contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable client. Description Juniper IVE OS is an operating system used by Juniper devices, such as the Juniper Networks Secu...

7.5CVSS7.4AI score0.67312EPSS
SaveExploits3References3
CERT
CERT
added 2006/04/17 12:00 a.m.44 views

Mozilla crypto.generateCRMFRequest() vulnerability

Overview A vulnerability exists in the Mozilla JavaScript routine generateCRMFRequest that may allow a remote attacker to execute arbitrary code. Description The crypto object and generateCRMFRequest The crypto object is used to provide services related to cryptography, such as handling digital...

6.9AI score
SaveExploits0References4
CERT
CERT
added 2006/02/14 12:00 a.m.44 views

Microsoft PowerPoint may disclose information in the Temporary Internet Files Folder

Overview Microsoft PowerPoint contains an information disclosure vulnerability. As a result, sensitive information may be exposed to untrusted parties. Description Microsoft PowerPoint fails to properly restrict access to objects in the Temporary Internet Files Folder TIFF. This vulnerability is...

5CVSS5.6AI score0.31512EPSS
SaveExploits0References2
CERT
CERT
added 2006/02/14 12:00 a.m.44 views

Microsoft Windows Korean Input Method Editor vulnerability

Overview The Microsoft Windows Korean Input Method Editor IME contains a privilege escalation vulnerability. Description According to Microsoft: An IME is a program that allows computer users to enter complex characters and symbols, such as Japanese characters, using a standard keyboard. The...

7.2CVSS6.5AI score0.01657EPSS
SaveExploits0References2
CERT
CERT
added 2005/11/08 12:00 a.m.44 views

Microsoft Windows vulnerable to buffer overflow via specially crafted WMF file

Overview Microsoft Windows may be vulnerable to remote code execution via a buffer overflow in the Windows Metafile image format handling. Description Windows Metafile WMF format images are metafiles that can contain both vector and bitmap-based information. Microsoft Windows contains routines fo...

7.6CVSS7.7AI score0.55713EPSS
SaveExploits2References2
CERT
CERT
added 2005/10/12 12:00 a.m.44 views

VERITAS NetBackup Java Administration Console contains a format string vulnerability in "bpjava-msvc"

Overview The VERITAS NetBackup Java Administration Console contains a format string vulnerability, which may allow an unauthenticated, remote attacker to execute arbitrary code with root or SYSTEM privileges. Description The Java Administration Console is an alternative administrative interface f...

8.3AI score
SaveExploits0References2
CERT
CERT
added 2005/09/22 12:00 a.m.44 views

Mozilla Firefox fails to properly sanitize user-supplied URIs via shell script

Overview A lack of input validation in a supplemental shell script included with some Mozilla browsers may allow a remote, unauthenticated attacker to execute arbitrary commands. Description The Linux versions of the Mozilla Firefox and Mozilla Suite web browsers include a wrapper shell script fo...

7.5CVSS6.7AI score0.10718EPSS
SaveExploits1References5
CERT
CERT
added 2005/07/12 12:00 a.m.44 views

Microsoft Word buffer overflow in font processing routine

Overview A buffer overflow in the font processing routine used by Microsoft Word may allow a remote attacker to execute code on a vulnerable system. Description Microsoft Word contains a buffer overflow in the routine that processes fonts. An remote attacker may be able to trigger the buffer...

7.5CVSS7.3AI score0.25652EPSS
SaveExploits0References1
CERT
CERT
added 2005/01/27 12:00 a.m.44 views

Apple Mac OS X "at" utilities fail to drop privileges properly

Overview Apple's Mac OS X operating system may allow local privilege escalation in family of "at" commands. Description Mac OS X includes the "at" family of commands in order to schedule tasks. However, a flaw in these commands results in the commands not dropping privileges correctly. This may...

7.2CVSS6.5AI score0.00358EPSS
SaveExploits1References5
CERT
CERT
added 2005/01/25 12:00 a.m.44 views

BIND 9.3.0 vulnerable to denial of service in validator code

Overview A vulnerability in the BIND name server could allow a remote attacker to cause a denial of service against an affected system. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. BIND supports the DNS...

4.3CVSS6.4AI score0.06354EPSS
SaveExploits0References2
CERT
CERT
added 2004/11/19 12:00 a.m.44 views

CUPS stores user account details in plain text in log file

Overview When an SMB printer is configured, CUPS stores plain text login information to the log file. Description CUPS is a cross-platform printing system for UNIX environments. It can use the IPP, LPD, SMB, and JetDirect protocols to interact with printers. The SMB protocol is used to communicat...

2.1CVSS5.5AI score0.00445EPSS
SaveExploits0References4
CERT
CERT
added 2004/10/13 12:00 a.m.44 views

Microsoft Internet Explorer does not properly handle navigations from plug-ins

Overview Microsoft Internet Explorer contains a vulnerability in its handling of navigation commands from plug-ins. This could let an attacker spoof the address of a website. Description Microsoft Internet Explorer improperly handles navigations from plug-ins, such as ActiveX controls. This...

5CVSS7.3AI score0.33792EPSS
SaveExploits0References2
CERT
CERT
added 2004/10/12 12:00 a.m.44 views

Microsoft Excel parameter validation error

Overview Microsoft has released a bulletin describing a remotely exploitable vulnerability in its Excel spreadsheet program. The vulnerability affects versions of Excel on Windows, MacOS 9, and MacOS X operating systems. Description There is a remotely exploitable vulnerability in Microsoft Excel...

7.5CVSS7.1AI score0.28348EPSS
SaveExploits0References3
CERT
CERT
added 2004/03/25 12:00 a.m.44 views

Ethereal ISUP protocol dissector fails to properly decode ISUP packets

Overview Ethereal fails to properly decode ISDN User Part ISUP packets containing an overly long Interworking Function Address IWFA value. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing ISUP data. There is a vulnerability in the wa...

5CVSS7.6AI score0.67092EPSS
SaveExploits2References3
CERT
CERT
added 2004/03/24 12:00 a.m.44 views

Ethereal contains multiple vulnerabilities in the EIGRP protocol dissector

Overview Ethereal contains multiple vulnerabilities in the Enhanced Interior Gateway Routing Protocol EIGRP protocol dissector. These vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code. Description Ethereal is a network traffic analysis package. It includes t...

5CVSS8.2AI score0.67092EPSS
SaveExploits2References3
CERT
CERT
added 2004/03/04 12:00 a.m.44 views

FreeBSD fails to limit number of TCP segments held in reassembly queue

Overview FreeBSD fails to limit the number of TCP segments held in a reassembly queue which could allow an attacker to exhaust all available memory buffers mbufs on the destination system resulting in a denial-of-service condition. Description The Transmission Control Protocol TCP is part of the...

5CVSS5.9AI score0.03169EPSS
SaveExploits0References4
CERT
CERT
added 2004/02/10 12:00 a.m.44 views

Microsoft ASN.1 Library improperly decodes malformed ASN.1 length values

Overview The Microsoft ASN.1 Library improperly decodes malformed ASN.1 length values which could allow an unauthenticated, remote attacker to execute arbitrary code with SYSTEM privileges. Description Abstract Syntax Notation number One ASN.1 is an international standard used to describe and...

7.5CVSS7.3AI score0.82241EPSS
SaveExploits6References5
CERT
CERT
added 2003/01/31 12:00 a.m.44 views

MIT Kerberos V5 ASN.1 decoder fails to perform bounds checking on data element length fields

Overview The MIT Kerberos V5 implementation contains an ASN.1 decoding flaw that may allow remote attackers to crash affected Kerberos applications. Description Kerberos V5 protocol messages are defined using Abstract Syntax Notation One ASN.1, a formal language that allows protocol specification...

5CVSS9.1AI score0.04525EPSS
SaveExploits0References2
Total number of security vulnerabilities3724