Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2003/08/26 12:00 a.m.45 views

Microsoft Internet Explorer contains buffer overflow in Type attribute of OBJECT element on double-byte character set systems

Overview Certain versions of Microsoft Internet Explorer IE that support double-byte character sets DBCS contain a buffer overflow vulnerability in the Type attribute of the OBJECT element. A remote attacker could execute arbitrary code with the privileges of the user running IE. Description...

7.7AI score
SaveExploits0References5
CERT
CERT
added 2003/06/27 12:00 a.m.45 views

Microsoft Windows HTML conversion library vulnerable to buffer overflow

Overview A buffer overflow vulnerability exists in a shared HTML conversion library used by Internet Explorer IE and other Windows applications. By enticing a victim to view an HTML document using IE, an attacker could execute arbitrary code with the victim's privileges or cause IE to crash...

7.5CVSS7AI score0.44629EPSS
SaveExploits1References11
CERT
CERT
added 2003/05/23 12:00 a.m.45 views

zlib "gzprintf()" function vulnerable to buffer overflow

Overview A buffer overflow exists in one of the functions included with the zlib compression library. This vulnerability may allow a remote attacker to execute arbitrary code or cause a denial of service. An exploit for this vulnerability is publicly available. Description The zlib website...

7.5CVSS7.5AI score0.25987EPSS
SaveExploits3References8
CERT
CERT
added 2002/09/27 12:00 a.m.45 views

Microsoft Windows SMTP Service fails to properly handle responses from the NTLM authentication layer

Overview A flaw in the authentication code of the SMTP service provided with Windows 2000 server and Exchange 5.5 may allow a user access to the SMTP service. This acess could be used to relay mail in violation of the SMTP server's security policy, or consume CPU resources on the SMTP server...

7.5CVSS7AI score0.22438EPSS
SaveExploits0References3
CERT
CERT
added 2002/08/01 12:00 a.m.45 views

Integer overflow in xdr_array() function when deserializing the XDR stream

Overview There is an integer overflow present in the xdrarray function distributed as part of the Sun Microsystems XDR library. This overflow has been shown to lead to remotely exploitable buffer overflows in multiple applications, leading to the execution of arbitrary code. Although the library...

10AI score
SaveExploits0References8
CERT
CERT
added 2002/07/11 12:00 a.m.45 views

Apache Web Server ap_log_rerror() function discloses full path to CGI script

Overview There is a vulnerability in Apache 2.0 through 2.035 that could disclose the real path to a CGI script or other file. Description A vulnerability in the Apache web server could disclose sensitive information. Quoting from the Apache Change Log: Security Added the APLOGTOCLIENT flag to...

6.7AI score
SaveExploits0References1
CERT
CERT
added 2002/06/13 12:00 a.m.45 views

Microsoft Internet Information Server (IIS) contains remote buffer overflow in chunked encoding data transfer mechanism for HTR

Overview A buffer overflow vulnerability in IIS 4.0 and 5.0 could allow an intruder to execute arbitrary code on an IIS server with the privileges of the HTR ISAPI extension. Description Chunked encoding is a means to transfer variable-sized units of data called chunks from a web client to a web...

7.5CVSS7.6AI score0.31005EPSS
SaveExploits4References1
CERT
CERT
added 2001/11/07 12:00 a.m.45 views

Weak CRC allows packet injection into SSH sessions encrypted with block ciphers

Overview There is an information integrity vulnerability in the SSH1 protocol that allows packets encrypted with a block cipher to be modified without notice. Description Preconditions: Attacker has a fragment of plaintext and its corresponding ciphertext. Attacker must be able to actively...

5CVSS9.2AI score0.03211EPSS
SaveExploits0References7
CERT
CERT
added 2001/09/28 12:00 a.m.45 views

Apache web server performs case sensitive filtering on Mac OS X HFS+ case insensitive filesystem

Overview The Apache 1.3.14 web server's file access protection scheme can be bypassed for the Mac OS X HFS+ filesystem. Description The Apache web server's file access protection scheme i.e., file request "filtering" assumes that the filesystem being protected is case sensitve. For example, in a...

9.8CVSS8.8AI score0.08161EPSS
SaveExploits2References6
CERT
CERT
added 2001/05/17 12:00 a.m.45 views

glibc unsetenv fails to properly handle environment variables passed more than once to a program

Overview The glibc implementation of unsetenv fails to properly remove one of two successive occurrences of the same environment variable if the variable is redundently passed to a program. Description The glibc implementation of unsetenv, if called to remove an environment variable that occurs t...

7.2CVSS6AI score0.01232EPSS
SaveExploits2References2
CERT
CERT
added 2001/04/05 12:00 a.m.45 views

Network Time Protocol ([x]ntpd) daemon contains buffer overflow in ntp_control:ctl_getitem() function

Overview There is a buffer overflow defect in the ctlgetitem function of the Network Time Protocol NTP daemon responsible for providing accurate time reports used for synchronizing the clocks on installed systems. All NTP daemons based on code maintained at the University of Delaware since NTPv2...

10CVSS7.6AI score0.91679EPSS
SaveExploits7References7
CERT
CERT
added 2000/12/15 12:00 a.m.45 views

Filemaker Pro 5.0v3 and below does not adequately protect web-enabled databases

Overview FileMaker may expose data inadvertently. Description FileMaker Web Companion prior to version 5.0v4 permits unauthorized access to data even if the database manager believes that data is protected by Field Level Security. --- Impact Attackers can read information, including items such as...

5CVSS5.9AI score0.0155EPSS
SaveExploits0References5
CERT
CERT
added 2022/08/04 12:00 a.m.44 views

muhttpd versions 1.1.5 and earlier are vulnerable to path traversal

Overview Versions 1.1.5 and earlier of the mu HTTP deamon muhttpd are vulnerable to path traversal via crafted HTTP request from an unauthenticated user. This vulnerability can allow unauthenticated users to download arbitrary files and collect private information on the target device. Descriptio...

7.5CVSS7.7AI score0.15852EPSS
SaveExploits2References3
CERT
CERT
added 2016/11/07 12:00 a.m.44 views

D-Link routers HNAP service contains stack-based buffer overflow

Overview D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action. Description CWE-121:Stack-based Buffer Overflow - CVE-2016-6563 Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack. The vulnerable XML fields...

10CVSS9.9AI score0.79947EPSS
SaveExploits6References3
CERT
CERT
added 2015/07/31 12:00 a.m.44 views

Chiyu Technology fingerprint access control contains multiple vulnerabilities

Overview Multiple models of Chiyu Technology fingerprint access control devices contain a cross-site scripting XSS vulnerability and an authentication bypass vulnerability. Description CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS- CVE-2015-2870According to t...

7.5CVSS5.8AI score0.01736EPSS
SaveExploits0References2
CERT
CERT
added 2015/07/30 12:00 a.m.44 views

BIOS implementations fail to properly set UEFI write protections after waking from sleep mode

Overview Multiple BIOS implementations fail to properly set write protections after waking from sleep, leading to the possibility of an arbitrary BIOS image reflash. Description According to Cornwell, Butterworth, Kovah, and Kallenberg, who reported the issue affecting certain Dell client systems...

7.2CVSS5.5AI score0.00765EPSS
SaveExploits0References3
CERT
CERT
added 2015/02/02 12:00 a.m.44 views

SerVision HVG Video Gateway web interface contains multiple vulnerabilities

Overview SerVision HVG Video Gateway web interface contains multiple vulnerabilities affecting multiple firmware versions. Description CWE-288: Authentication Bypass Using an Alternate Path or Channel, andCWE-284: Improper Access Control - CVE-2015-0929By visiting time.htm, a user is issued a...

10CVSS7AI score0.03445EPSS
SaveExploits1References4
CERT
CERT
added 2015/01/23 12:00 a.m.44 views

LabTech contains privilege escalation vulnerability

Overview LabTech startup scripts and directories on Linux platforms are world-writeable and the scripts execute with root privileges. Description CWE-284: Improper Access Control LabTech startup scripts and directories on Linux platforms are world-writeable and the scripts execute with root...

6.8CVSS6.6AI score0.00353EPSS
SaveExploits0References1
CERT
CERT
added 2014/12/12 12:00 a.m.44 views

Honeywell OPOS suite Stack Buffer Overflow vulnerability

Overview The Honeywell OPOS OLE for Retail Point-of-Sale POS Suite is vulnerable to a stack buffer overflow attack. Description The Honeywell OPOS Suite provides a standard programming interface that allows POS hardware to be easily integrated into retail POS systems based on Microsoft Windows...

7.5CVSS7.5AI score0.04747EPSS
SaveExploits0References3
CERT
CERT
added 2014/10/08 12:00 a.m.44 views

IBM WebSphere Application Server contains multiple vulnerabilities

Overview IBM WebSphere Application Server, including the Hypervisor Edition, contains cross-site scripting and cross-site request forgery vulnerabilities. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-4770IBM WebSphere Applicatio...

6CVSS5.4AI score0.01932EPSS
SaveExploits0References3
CERT
CERT
added 2014/02/18 12:00 a.m.44 views

Belkin Wemo Home Automation devices contain multiple vulnerabilities

Overview Belkin Wemo Home Automation devices contain multiple vulnerabilities. Description CWE-321: Use of Hard-coded Cryptographic Key -CVE-2013-6952 Belkin Wemo Home Automation firmware contains a hard-coded cryptographic key and password. An attacker may be able to extract the key and password...

10CVSS7.2AI score0.03836EPSS
SaveExploits5References7
CERT
CERT
added 2013/11/04 12:00 a.m.44 views

Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution

Overview The Attachmate Verastream Host Integrator VHI is vulnerable to arbitrary file uploads and execution. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' - CVE-2013-3626The Attachmate VHI Session Server, on all platforms, allows unauthenticated...

9.3CVSS7.1AI score0.02778EPSS
SaveExploits0References2
CERT
CERT
added 2013/04/19 12:00 a.m.44 views

avast! Mobile Security Android application denial-of-service vulnerability

Overview avast! Mobile Security Android application version 2.0.3587, and possibly earlier versions, contains a denial-of-service vulnerability. Description avast! Mobile Security version 2.0.3587 crashes if an Intent is sent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with...

1.9CVSS6.3AI score0.00359EPSS
SaveExploits0References1
CERT
CERT
added 2013/03/20 12:00 a.m.44 views

Askiaweb survey application contains multiple vulnerabilities

Overview The Askiaweb survey application contains multiple vulnerabilities. Description The Askiaweb survey application contains multiple vulnerabilities.CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2013-0123 The administration interface for the...

7.5CVSS6.9AI score0.01468EPSS
SaveExploits0References3
CERT
CERT
added 2012/05/29 12:00 a.m.44 views

AutoFORM PDM Archive contains multiple vulnerabilities

Overview AutoFORM PDM Archive contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description According to AutoFORM's website AutoFORM PDM Archive is a comprehensive output management solution that encompasses document...

6.5CVSS8.1AI score0.01574EPSS
SaveExploits0References4
CERT
CERT
added 2012/05/25 12:00 a.m.44 views

dotCMS template permissions allow arbitrary code execution

Overview The dotCMS content management system version 1.9 and possibly earlier versions, contains a vulnerability that allows users with the appropriate permissions to create a malicious template with arbitrary code. Description An authenticated dotCMS user with the permissions required to author...

6CVSS6.9AI score0.0219EPSS
SaveExploits1References5
CERT
CERT
added 2011/11/04 12:00 a.m.44 views

Microsoft Windows TrueType font parsing vulnerability

Overview A vulnerability in the Microsoft Windows TrueType font parsing component could allow an attacker to run arbitrary code in kernel mode. This vulnerability is reportedly being exploited by malicious software in the wild known as Duqu. Description The Microsoft Windows kernel includes a...

9.3CVSS6.5AI score0.78285EPSS
SaveExploits1References1
CERT
CERT
added 2011/07/15 12:00 a.m.44 views

HP ArcSight Connector Appliance XSS vulnerability

Overview ArcSight Connector Appliance v6.0.0.60023.2, and possibly previous versions, contains a module which is vulnerable to cross site scripting XSS. Description Windows Event Log SmartConnector, a component of ArcSight Connector Appliance v6.0.0.60023.2 does not sanitize all input fields. As ...

4.3CVSS5.7AI score0.03503EPSS
SaveExploits0
CERT
CERT
added 2011/05/31 12:00 a.m.44 views

Imperva SecureSphere management GUI contains an XSS vulnerability

Overview An XSS vulnerability exists in the Imperva SecureSphere management GUI. Description Dell SecureWorks' SWRX-2011-001 advisory states:"A vulnerability exists in Imperva SecureSphere due to improper validation of user-controlled input. User-controllable input is not properly sanitized for...

4.3CVSS5.9AI score0.01248EPSS
SaveExploits0References3
CERT
CERT
added 2011/05/06 12:00 a.m.44 views

Samsung Data Management Server vulnerable to SQL injection

Overview The Samsung Integrated Management System DMS is used to manage several air conditioning units. The DMS contains a built-in web server that is susceptible to SQL injection attacks. Description The DMS application's authentication form can be bypassed with SQL injection attacks. Versions...

7.5CVSS7.4AI score0.01779EPSS
SaveExploits0References6
CERT
CERT
added 2010/04/02 12:00 a.m.44 views

Oracle Sun Java fails to properly validate Java applet signatures

Overview Oracle Sun Java fails to properly validate Java applet signatures, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Signed Java applets have the ability to perform actions outside of the traditional Java sandbox, including...

7.5CVSS9.4AI score0.03337EPSS
SaveExploits0References4
CERT
CERT
added 2010/03/25 12:00 a.m.44 views

Broadcom NetXtreme management firmware ASF buffer overflow

Overview A buffer overflow vulnerability exists in the Broadcom NetXtreme management firmware. This vulnerability may allow a remote attacker to execute arbitrary code on an affected device. Description The Alert Standard Format ASF Specification is a protocol developed by Distributed Management...

10CVSS8.3AI score0.0651EPSS
SaveExploits0References3
CERT
CERT
added 2010/03/01 12:00 a.m.44 views

Internet Explorer VBScript Windows Help arbitrary code execution

Overview Microsoft Internet Explorer is vulnerable to arbitrary code execution through the use of VBScript and Windows Help. Description Microsoft Internet Explorer supports the use of VBScript, in addition to the more widely-used JavaScript scripting language. Several VBScript commands allow a...

7.6CVSS6.3AI score0.86367EPSS
SaveExploits8References6
CERT
CERT
added 2009/12/09 12:00 a.m.44 views

DISA UNIX SRR scripts execute untrusted programs as root

Overview The Defense Information Systems Agency DISA UNIX Security Readiness Review SRR scripts find1 and execute -exec various programs to obtain version information. The SRR scripts are designed to be run as root. An attacker who can write a file under the root file system may be able to exploi...

9.3CVSS6.9AI score0.01691EPSS
SaveExploits1References5
CERT
CERT
added 2008/03/12 12:00 a.m.44 views

Microsoft Office Web Components Spreadsheet ActiveX control URL parsing stack buffer overflow

Overview The Microsoft Office Web Components ActiveX controls contain a stack buffer overflow in the processing of URLs, which allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office Web Components are ActiveX controls that provide...

9.3CVSS6.7AI score0.4014EPSS
SaveExploits6References3
CERT
CERT
added 2008/03/06 12:00 a.m.44 views

IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) allows buffer overflow via HTTP request

Overview The IBM Tivoli Provisioning Manager for OS Deployment TPMfOSD contains a buffer overflow vulnerability in the web server component. This vulnerability may allow an attacker to execute arbitrary code with SYSTEM privileges or cause a denial of service. Description IBM Tivoli Provisioning...

10CVSS7.6AI score0.08377EPSS
SaveExploits5References5
CERT
CERT
added 2008/01/31 12:00 a.m.44 views

Liferay Portal Forgot Password User-Agent HTTP header XSS

Overview Liferay Portal contains a cross-site scripting vulnerability in the handling of the User-Agent HTTP header, which can allow a remote, authenticated attacker to inject content into "Forgot Password" emails. Description Liferay Portal is an enterprise portal solution that uses Java...

2.6CVSS5.5AI score0.01212EPSS
SaveExploits0References2
CERT
CERT
added 2008/01/25 12:00 a.m.44 views

inet_network() off-by-one buffer overflow

Overview The inetnetwork resolver function contains an off-by-one buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The inetnetwork function takes a character string representation for an internet address and returns...

10CVSS7.9AI score0.123EPSS
SaveExploits1References7
CERT
CERT
added 2007/12/18 12:00 a.m.44 views

Apple Safari code execution vulnerability

Overview The Apple Safari web browser contains a vulnerability that may allow an attacker to execute arbitrary code. Description Per Apple Security Update 2007-009:A memory corruption issue exists in Safari's handling of feed: URLs. By enticing a user to access a maliciously crafted URL, an...

9.3CVSS9.7AI score0.05589EPSS
SaveExploits1References1
CERT
CERT
added 2007/10/19 12:00 a.m.44 views

Mozilla products vulnerable to memory corruption in the JavaScript engine

Overview A number of vulnerabilities in the Mozilla JavaScript engine may allow the execution of arbitrary code or denial of service. Description The Mozilla JavaScript engine contains several vulnerabilities that may result in memory corruption. The impact of this memory corruption in specific...

4.3CVSS7.4AI score0.0343EPSS
SaveExploits1References5
CERT
CERT
added 2007/10/19 12:00 a.m.44 views

Mozilla XUL web applications may hide the titlebar

Overview Mozilla's XUL contains a vulnerability that may allow a web application to cover an active window's titlebar. Description XUL is Mozilla's XML-based user interface language. XUL can be used to create Mozilla applications, extensions, and web applications.From Mozilla Foundation Security...

4.3CVSS5.7AI score0.03017EPSS
SaveExploits1References3
CERT
CERT
added 2007/07/11 12:00 a.m.44 views

Microsoft Windows Active Directory fails to properly validate client sent LDAP requests

Overview Microsoft Windows Active Directory fails to properly validate client-sent LDAP requests and may result in a denial of service condition. Description Microsoft Windows Active Directory contains a vulnerability in the way that the LDAP service validates the number of convertible attributes...

5CVSS6.2AI score0.39668EPSS
SaveExploits1References1
CERT
CERT
added 2007/05/30 12:00 a.m.44 views

Sun Java System Web Proxy Server fails to properly process malformed packets

Overview A vulnerability in the way Sun Java System Web Proxy Server processes malformed packets may allow execution of arbitrary code. Description SOCKS is a network protocol that provides a framework that allows client-server applications to securely use network firewall services. A vulnerabili...

10CVSS7.4AI score0.25703EPSS
SaveExploits4References3
CERT
CERT
added 2007/02/15 12:00 a.m.44 views

Mozilla browsers "location.hostname" cross-domain vulnerability

Overview Mozilla-based browsers contain a cross-domain vulnerability, which may allow an attacker to access data in other sites. Description Mozilla uses a same origin security model to maintain separation between browser frames from different sources. This model is designed to prevent code in on...

7.5CVSS9.2AI score0.12144EPSS
SaveExploits7References26
CERT
CERT
added 2007/01/19 12:00 a.m.44 views

Adobe Acrobat allows pointer overwrite via specially crafted PDF file

Overview Adobe Acrobat and Adobe Reader fail to properly handle a specially crafted PDF file, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Adobe Acrobat and Adobe Reader are applications designed to create and view Portable Document Format PDF...

9.3CVSS7.2AI score0.09155EPSS
SaveExploits0References8
CERT
CERT
added 2006/11/16 12:00 a.m.44 views

Sky Software FileView ActiveX control buffer overflow vulnerability

Overview The Sky Software FileView ActiveX control contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Sky Software FileView object is an ActiveX control that is provided with several...

7.1AI score
SaveExploits0References4
CERT
CERT
added 2006/11/02 12:00 a.m.44 views

Computer Associates BrightStor ARCserv and Protection Suite products RPC buffer overflow vulnerabilities

Overview Multiple vulnerabilities exist in Computer Associates backup products. If successfully exploited, these vulnerabilities may allow an attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that integrates with other BrightStor Data...

7.5CVSS7.6AI score0.78513EPSS
SaveExploits15References15
CERT
CERT
added 2006/10/02 12:00 a.m.44 views

Apple QuickDraw Manager fails to properly handle malicious PICT images

Overview A vulnerability exists in how Apple OS X handles PICT images. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code, or create a denial-of-service condition. Description From Apple,Certain applications invoke an unsupported QuickDraw operatio...

5.1CVSS7.3AI score0.02794EPSS
SaveExploits0References3
CERT
CERT
added 2006/09/22 12:00 a.m.44 views

Apple AirPort wireless drivers vulnerable to integer overflow

Overview An integer overflow exists in the Apple AirPort wireless drivers. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, or create a denial-of-service condition. Description According to Apple,An integer overflow exists in the AirPort wireless...

7.2CVSS7.7AI score0.00498EPSS
SaveExploits0References2
CERT
CERT
added 2006/08/21 12:00 a.m.44 views

BlackBerry Enterprise Server fails to properly handle Microsoft Word attachments

Overview A buffer overflow vulnerability in BlackBerry Enterprise Server may allow a remote attacker to execute arbitrary code. Description A buffer overflow vulnerability exists in the BlackBerry Attachment Service component of BlackBerry Enterprise Server. This vulnerability may allow a remote...

5.1CVSS7.3AI score0.02717EPSS
SaveExploits0References2
Total number of security vulnerabilities3724