Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2006/05/04 12:00 a.m.44 views

Juniper Networks IVE client ActiveX control buffer overflow

Overview The ActiveX control used by Juniper IVE OS devices contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable client. Description Juniper IVE OS is an operating system used by Juniper devices, such as the Juniper Networks Secu...

7.5CVSS7.4AI score0.67312EPSS
SaveExploits3References3
CERT
CERT
added 2006/02/14 12:00 a.m.44 views

Microsoft Windows Korean Input Method Editor vulnerability

Overview The Microsoft Windows Korean Input Method Editor IME contains a privilege escalation vulnerability. Description According to Microsoft: An IME is a program that allows computer users to enter complex characters and symbols, such as Japanese characters, using a standard keyboard. The...

7.2CVSS6.5AI score0.01657EPSS
SaveExploits0References2
CERT
CERT
added 2006/02/14 12:00 a.m.44 views

Microsoft PowerPoint may disclose information in the Temporary Internet Files Folder

Overview Microsoft PowerPoint contains an information disclosure vulnerability. As a result, sensitive information may be exposed to untrusted parties. Description Microsoft PowerPoint fails to properly restrict access to objects in the Temporary Internet Files Folder TIFF. This vulnerability is...

5CVSS5.6AI score0.31512EPSS
SaveExploits0References2
CERT
CERT
added 2005/11/10 12:00 a.m.44 views

Optimistic TCP acknowledgements can cause denial of service

Overview A vulnerability in the TCP congestion control mechanism could be leveraged by an attacker to cause a denial of service. Description The Transmission Control Protocol TCP is described in RFC 793 as a means to provide reliable host-to-host transmission in a packet-switched computer network...

7.8CVSS6.4AI score0.02317EPSS
SaveExploits0References7
CERT
CERT
added 2005/11/08 12:00 a.m.44 views

Microsoft Windows vulnerable to buffer overflow via specially crafted WMF file

Overview Microsoft Windows may be vulnerable to remote code execution via a buffer overflow in the Windows Metafile image format handling. Description Windows Metafile WMF format images are metafiles that can contain both vector and bitmap-based information. Microsoft Windows contains routines fo...

7.6CVSS7.7AI score0.55713EPSS
SaveExploits2References2
CERT
CERT
added 2005/10/12 12:00 a.m.44 views

VERITAS NetBackup Java Administration Console contains a format string vulnerability in "bpjava-msvc"

Overview The VERITAS NetBackup Java Administration Console contains a format string vulnerability, which may allow an unauthenticated, remote attacker to execute arbitrary code with root or SYSTEM privileges. Description The Java Administration Console is an alternative administrative interface f...

8.3AI score
SaveExploits0References2
CERT
CERT
added 2005/09/22 12:00 a.m.44 views

Mozilla Firefox fails to properly sanitize user-supplied URIs via shell script

Overview A lack of input validation in a supplemental shell script included with some Mozilla browsers may allow a remote, unauthenticated attacker to execute arbitrary commands. Description The Linux versions of the Mozilla Firefox and Mozilla Suite web browsers include a wrapper shell script fo...

7.5CVSS6.7AI score0.10718EPSS
SaveExploits1References5
CERT
CERT
added 2005/01/27 12:00 a.m.44 views

Apple Mac OS X "at" utilities fail to drop privileges properly

Overview Apple's Mac OS X operating system may allow local privilege escalation in family of "at" commands. Description Mac OS X includes the "at" family of commands in order to schedule tasks. However, a flaw in these commands results in the commands not dropping privileges correctly. This may...

7.2CVSS6.5AI score0.00358EPSS
SaveExploits1References5
CERT
CERT
added 2005/01/25 12:00 a.m.44 views

BIND 9.3.0 vulnerable to denial of service in validator code

Overview A vulnerability in the BIND name server could allow a remote attacker to cause a denial of service against an affected system. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. BIND supports the DNS...

4.3CVSS6.4AI score0.06354EPSS
SaveExploits0References2
CERT
CERT
added 2004/11/19 12:00 a.m.44 views

CUPS stores user account details in plain text in log file

Overview When an SMB printer is configured, CUPS stores plain text login information to the log file. Description CUPS is a cross-platform printing system for UNIX environments. It can use the IPP, LPD, SMB, and JetDirect protocols to interact with printers. The SMB protocol is used to communicat...

2.1CVSS5.5AI score0.00445EPSS
SaveExploits0References4
CERT
CERT
added 2004/10/13 12:00 a.m.44 views

Microsoft Internet Explorer does not properly handle navigations from plug-ins

Overview Microsoft Internet Explorer contains a vulnerability in its handling of navigation commands from plug-ins. This could let an attacker spoof the address of a website. Description Microsoft Internet Explorer improperly handles navigations from plug-ins, such as ActiveX controls. This...

5CVSS7.3AI score0.33792EPSS
SaveExploits0References2
CERT
CERT
added 2004/03/25 12:00 a.m.44 views

Ethereal ISUP protocol dissector fails to properly decode ISUP packets

Overview Ethereal fails to properly decode ISDN User Part ISUP packets containing an overly long Interworking Function Address IWFA value. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing ISUP data. There is a vulnerability in the wa...

5CVSS7.6AI score0.67092EPSS
SaveExploits2References3
CERT
CERT
added 2004/03/24 12:00 a.m.44 views

Ethereal contains multiple vulnerabilities in the EIGRP protocol dissector

Overview Ethereal contains multiple vulnerabilities in the Enhanced Interior Gateway Routing Protocol EIGRP protocol dissector. These vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code. Description Ethereal is a network traffic analysis package. It includes t...

5CVSS8.2AI score0.67092EPSS
SaveExploits2References3
CERT
CERT
added 2003/01/21 12:00 a.m.44 views

Concurrent Versions System (CVS) server improperly deallocates memory

Overview A "double-free" vulnerability in the Concurrent Versions System CVS server could allow a remote attacker to execute arbitrary code or commands or cause a denial of service on a vulnerable system. Description CVS is a source code maintenance system that is widely used by open-source...

7.5CVSS7.4AI score0.2387EPSS
SaveExploits2References5
CERT
CERT
added 2002/08/07 12:00 a.m.44 views

Nevrona Designs MiraMail stores all configuration and user account information in unencrypted text file

Overview Some versions of MiraMail store username and passwords in a text file without using encryption. Description MiraMail is a news server for Windows-based hosts. Versions of MiraMail up to and including 1.04 store MiraMail user data, including usernames and passwords, in unencrypted plainte...

2.1CVSS6AI score0.00424EPSS
SaveExploits0References2
CERT
CERT
added 2002/07/11 12:00 a.m.44 views

Buffer overflow in Windows Multiple UNC Provider (MUP) service

Overview A buffer overflow in the Microsoft Windows Multiple UNC Provider MUP could allow a local user to execute code with system privileges. Description Microsoft Windows recognizes resources identified by the Uniform Naming Convention UNC. Requests for resources identified by UNC references ar...

7.2CVSS7.1AI score0.03257EPSS
SaveExploits0References2
CERT
CERT
added 2002/05/09 12:00 a.m.45 views

Sun Solaris cachefsd vulnerable to stack overflow in fscache_setup() function

Overview Sun's NFS/RPC cachefs daemon cachefsd is shipped and installed by default with Sun Solaris 2.5.1, 2.6, 7, and 8 SPARC and Intel architectures. Cachefsd caches requests for operations on remote file systems mounted via the use of NFS protocol. An exploitable stack overflow exists in...

7.2CVSS7.2AI score0.20716EPSS
SaveExploits1References4
CERT
CERT
added 2002/02/25 12:00 a.m.44 views

Oracle9i Application Server Apache PL/SQL module does not properly handle HTTP Authorization header

Overview A vulnerability exists in the way the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle9i Application Server iAS handles HTTP Authorization headers. This vulnerability could allow an unauthenticated remote attacker to crash the Apache service. Description...

5CVSS9.1AI score0.03575EPSS
SaveExploits0References8
CERT
CERT
added 2001/12/10 12:00 a.m.44 views

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

Overview There is a format string vulnerability in GNU Privacy Guard. By sending a GPG message with a carefully crafted malicious filename, an attacker may be able to execute arbitrary code as the user who decrypts the message. Description GNU Privacy Guard GPG is a free, RFC2440 compliant...

7.5CVSS6.8AI score0.13728EPSS
SaveExploits1References13
CERT
CERT
added 2001/07/24 12:00 a.m.44 views

Debian glibc 2 symlink issue could allow arbitrary file overwriting

Overview Some versions of ld.so, the loader for shared libraries in UNIX/LINUX, do not properly clear risky environment variables, allowing a symlink attack to overwrite arbitrary files. Description LDDEBUGOUTPUT specifies a directory in which ld.so creates a file with a predictable name based on...

1.2CVSS6.2AI score0.00303EPSS
SaveExploits0References1
CERT
CERT
added 2000/11/02 12:00 a.m.44 views

Adobe Acrobat products have buffer overflow in the CIDFont /Registry and /Ordering entries

Overview By embedding malicious code in a Portable Document Format PDF file, an attacker can cause arbitrary code to execute on the victim's system. Description The Adobe Acrobat PDF file format facility for specifying fonts contains buffer overflows in the /Registry and /Ordering entries. Each o...

7.6CVSS7.2AI score0.04882EPSS
SaveExploits0References2
CERT
CERT
added 2022/06/21 12:00 a.m.43 views

SMA Technologies OpCon UNIX agent adds the same SSH key to all installations

Overview SMA Technologies OpCon UNIX agent adds the same SSH key on every installation and subsequent updates. An attacker with access to the private key can gain root access on affected systems. Description During OpCon UNIX agent installation and updates, an SSH public key is added to the root...

5.3AI score
SaveExploits0References2
CERT
CERT
added 2016/10/11 12:00 a.m.43 views

MatrixSSL contains multiple vulnerabilities

Overview MatrixSSL, version 3.8.5 and earlier, contains heap overflow, out-of-bounds read, and unallocated memory free operation vulnerabilities. Description CWE-122: Heap-based Buffer Overflow - CVE-2016-6890The Subject Alt Name field of X.509 certificates is not properly parsed. A specially...

10CVSS8.7AI score0.06432EPSS
SaveExploits0References6
CERT
CERT
added 2016/10/04 12:00 a.m.43 views

Animas OneTouch Ping insulin pump contains multiple vulnerabilities

Overview The Animas OneTouch Ping insulin pump contains multiple vulnerabilities that may allow an unauthenticated remote attacker to obtain patient treatment or device data, or execute commands on the device. The attacker cannot obtain personally identifiable information. Description CWE-319:...

9.8CVSS9.4AI score0.04519EPSS
SaveExploits0References2
CERT
CERT
added 2016/07/19 12:00 a.m.43 views

Objective Systems ASN1C generates code that contains a heap overflow vulnerability

Overview ASN.1 is a standard representation of data for networking and telecommunications applications. Objective System's ASN1C compiler generates C and C++ code that may be vulnerable to heap overflow. Description CWE-122: Heap-based Buffer Overflow - CVE-2016-5080ASN1C is used to generate...

10CVSS9.3AI score0.10064EPSS
SaveExploits0References4
CERT
CERT
added 2016/02/02 12:00 a.m.43 views

OpenELEC and RasPlex have a hard-coded SSH root password

Overview OpenELEC and derivatives utilize a hard-coded default root password, and enable SSH root access by default. Description CWE-259: Use of Hard-coded Password OpenELEC has a hard-coded root password. The root partition is by default read-only, preventing a user from changing the password on...

7.3AI score
SaveExploits0References4
CERT
CERT
added 2016/01/04 12:00 a.m.43 views

Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input

Overview Furuno Voyage Data Recorder VDR VR-3000/VR-3000S and VR-7000 moduleserv firmware update utility fails to properly sanitize user-provided input and is vulnerable to arbitrary command execution with root privileges. Description According to the Furuno VDR product page, the VDR "records all...

8.3AI score
SaveExploits0References2
CERT
CERT
added 2015/10/27 12:00 a.m.43 views

EPSON Network Utility installs EpsonBidirectionalService with insecure permissions

Overview EPSON Network Utility contains a local privilege escalation vulnerability, which allows a local attacker to execute arbitrary code with SYSTEM privileges. Description CWE-276: Incorrect Default Permissions - CVE-2015-6034EPSON Network Utility v4.10 is an application that checks the print...

6.9CVSS7.3AI score0.00319EPSS
SaveExploits0References2
CERT
CERT
added 2015/06/15 12:00 a.m.43 views

Retrospect Backup Client uses weak password hashing

Overview Retrospect Backup Client is a client to a network-based backup utility. This client stores passwords in a hashed format that is weak and susceptible to collision, allowing an attacker to generate a password hash collision and gain access to the target's backup files. Description CWE-916:...

5CVSS7.1AI score0.03338EPSS
SaveExploits1References3
CERT
CERT
added 2015/03/03 12:00 a.m.43 views

ShareLaTeX vulnerable to remote command execution and information disclosure

Overview ShareLaTeX is a server-based software allowing group collaboration on LaTeX documents. ShareLaTeX prior to version 0.1.3 has been found to be vulnerable to command injections and information disclosure. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path...

6.5CVSS6.4AI score0.01927EPSS
SaveExploits0References3
CERT
CERT
added 2015/01/05 12:00 a.m.43 views

Tianocore UEFI implementation reclaim function vulnerable to buffer overflow

Overview The reclaim function in the Tianocore open source implementation of UEFI contains a buffer overflow vulnerability. Description The open source Tianocore project provides a reference implementation of the Unified Extensible Firmware Interface UEFI. Some commercial UEFI implementations...

6.8CVSS6.9AI score0.00405EPSS
SaveExploits0References4
CERT
CERT
added 2014/07/11 12:00 a.m.43 views

Datum Systems satellite modem devices contain multiple vulnerabilities

Overview Datum Systems PSM-4500 and PSM-500 series satellite modem devices contain multiple vulnerabilities Description CWE-220:Sensitive Data Under FTP Root - CVE-2014-2950The Datum Systems SnIP operating system on PSM-4500 and PSM-500 satellite modem devices has FTP enabled by default with no...

10CVSS7.1AI score0.02294EPSS
SaveExploits0References3
CERT
CERT
added 2014/04/10 12:00 a.m.43 views

Microsoft Office file format converter memory corruption vulnerability

Overview The Microsoft Office file format converter contains a memory corruption vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code with the privileges of the user. Description Microsoft Office file format converter is a component that converts legacy...

9.3CVSS8AI score0.17315EPSS
SaveExploits0References2
CERT
CERT
added 2014/02/18 12:00 a.m.43 views

Belkin Wemo Home Automation devices contain multiple vulnerabilities

Overview Belkin Wemo Home Automation devices contain multiple vulnerabilities. Description CWE-321: Use of Hard-coded Cryptographic Key -CVE-2013-6952 Belkin Wemo Home Automation firmware contains a hard-coded cryptographic key and password. An attacker may be able to extract the key and password...

10CVSS7.2AI score0.03836EPSS
SaveExploits5References7
CERT
CERT
added 2013/10/15 12:00 a.m.43 views

HR Systems Strategies info:HR HRIS allows read access to weakly obfuscated shared database password

Overview HR Systems Strategies info:HR HRIS 7.9 and possibly earlier versions allow read access to a weakly obfuscated database password. This password is shared by all clients within an info:HR site. A local attacker can decipher the password and gain complete control of the database and...

4.1CVSS6.9AI score0.00291EPSS
SaveExploits0References3
CERT
CERT
added 2010/12/15 12:00 a.m.43 views

Invensys Wonderware InBatch and Foxboro I/A Series Batch database lock manager service (lm_tcp) buffer overflow vulnerability

Overview The lmtcp service in Invensys Wonderware InBatch and Foxboro I/A Series Batch contains a buffer overflow vulnerability when coping string data into a buffer in a fixed structure. Description From the Invensys Wonderware website: "InBatch is powerful software that can be used in the most...

8.3AI score
SaveExploits0References5
CERT
CERT
added 2010/08/05 12:00 a.m.43 views

FreeType 2 CFF font stack corruption vulnerability

Overview FreeType 2 contains a vulnerability in the processing of CFF fonts, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description FreeType is a font engine that can open and process font files. FreeType 2 includes the ability to handle a...

9.3CVSS8.2AI score0.30653EPSS
SaveExploits8References8
CERT
CERT
added 2010/04/06 12:00 a.m.43 views

IntelliCom NetBiter devices have default HICP passwords

Overview IntelliCom NetBiter devices ship with default passwords for the HICP network configuration service. An attacker with network access could change network settings and prevent legitimate users from accessing the HICP service. Description IntelliCom NetBiter products use the proprietary HIC...

10CVSS5.9AI score0.03389EPSS
SaveExploits1References4
CERT
CERT
added 2009/12/15 12:00 a.m.43 views

Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method

Overview The Doc.media.newPlayer method in Adobe Acrobat and Reader contains a use-after-free vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Reader and the Adobe Acrobat family of software are designed to creat...

9.3CVSS8.7AI score0.81933EPSS
SaveExploits21References8
CERT
CERT
added 2009/11/30 12:00 a.m.43 views

Clientless SSL VPN products break web browser domain-based security models

Overview Clientless SSL VPN products from multiple vendors operate in a way that breaks fundamental browser security mechanisms. An attacker could use these devices to bypass authentication or conduct other web-based attacks. Description Web browsers enforce the same origin policy to prevent one...

6.8CVSS6.5AI score0.04823EPSS
SaveExploits0References10
CERT
CERT
added 2009/04/03 12:00 a.m.43 views

Microsoft Office PowerPoint code execution vulnerability

Overview Microsoft PowerPoint contains a vulnerability. If exploited, this vulnerability could allow an attacker to execute code. Description Microsoft Powerpoint is a component of Microsoft Office. Per Microsoft Security Advisory 969136: The vulnerability is caused when Microsoft Office PowerPoi...

9.3CVSS6.7AI score0.67539EPSS
SaveExploits5References2
CERT
CERT
added 2008/06/26 12:00 a.m.43 views

Microsoft Internet Explorer 6 contains a cross-domain vulnerability

Overview Microsoft Internet Explorer 6 is vulnerable to a cross-domain scripting violation, which can allow a remote, unauthenticated attacker to access the content of a web page in a different domain. Description IE uses a cross-domain security model to maintain separation between browser frames...

6.2AI score
SaveExploits0References3
CERT
CERT
added 2008/06/06 12:00 a.m.43 views

HP Online Support Services ActiveX StartApp() arbitrary code execution

Overview The HP Online Support Services ActiveX control contains a method called StartApp. This may allow a remote, unauthenticated attacker to execute local files on a vulnerable system in the context of the local user. Description HP Services provides online product support services including H...

6AI score
SaveExploits0References2
CERT
CERT
added 2008/05/29 12:00 a.m.43 views

GnuTLS Server Name extension Denial of Service

Overview A vulnerability exists in GnuTLS that may allow a remote attacker to cause a denial of service. Description GnuTLS contains a vulnerability in gnults-serv that may result in a denial of service when handling a specially crafted Client Hello message. According to CERT-FI Vulnerability...

5CVSS8.8AI score0.04954EPSS
SaveExploits1References4
CERT
CERT
added 2008/05/06 12:00 a.m.43 views

PHP path translation vulnerability

Overview PHP contains a path translation vulnerability that may allow an attacker to execute arbitrary code. Description PHP is a scripting language that is designed for web-based applications and can be imbedded directly into HTML.PHP versions prior to 5.2.6 contain a path translation...

10CVSS9.4AI score0.10918EPSS
SaveExploits2References2
CERT
CERT
added 2008/04/18 12:00 a.m.43 views

Apple Safari fails to properly handle a file name

Overview A vulnerabilty in Apple Safari handles specially crafted file name may allow execution of arbitrary code or denial of service. Description According to Apple Safari 3.1.1:A memory corruption issue exists in Safari's file downloading. By enticing a user to download a file with a malicious...

6.8CVSS7.5AI score0.04015EPSS
SaveExploits1References1
CERT
CERT
added 2007/08/14 12:00 a.m.43 views

Microsoft GDI Windows Metafile AttemptWrite integer overflow

Overview Microsoft Windows GDI contains an integer overflow in the handling of Windows metafiles, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Windows GDI Graphics Device Interface enables applications to use graphics a...

9.3CVSS7.2AI score0.51924EPSS
SaveExploits2References4
CERT
CERT
added 2007/07/11 12:00 a.m.43 views

Mozilla Firefox URL protocol handling vulnerability

Overview Mozilla Firefox protocol handlers may allow remotely supplied JavaScript to execute with elevated privileges. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description On Microsoft Windows systems, Mozilla Firefox installs protocol...

4.3CVSS8.4AI score0.29355EPSS
SaveExploits4References12
CERT
CERT
added 2007/03/06 12:00 a.m.43 views

Apple QuickTime PICT heap buffer overflow

Overview The Apple QuickTime player contains a heap buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description PICT is a graphics file format that was used by Apple Macintosh systems prior to OS X as their...

5.8CVSS7.4AI score0.06087EPSS
SaveExploits1References12
CERT
CERT
added 2007/02/26 12:00 a.m.43 views

HP Mercury products vulnerable to buffer overflow

Overview Some HP Mercury products are vulnerable to a buffer overflow and may allow an attacker to execute arbitrary code. Description The magentproc.exe service provided with some HP Mercury products fails to properly parse values in the serveripname field. If an overly long value is sent in thi...

10CVSS7.1AI score0.44457EPSS
SaveExploits5References5
Total number of security vulnerabilities3724