Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2006/11/30 12:00 a.m.42 views

Apple AirPort driver fails to properly handle probe response frames

Overview A buffer overflow in certain Apple AirPort drivers may allow an attacker to execute arbitrary code with system privileges, or create a denial-of-service condition. Description Apple Airport products are 802.11b and 802.11g compatible wireless devices that are produced by Apple. Airport...

7.5CVSS7.6AI score0.18518EPSS
SaveExploits3References5
CERT
CERT
added 2006/10/24 12:00 a.m.42 views

Oracle SYS.DBMS_CDC_IMPDP package vulnerable to PL/SQL injection

Overview The Oracle SYS.DBMSCDCIMPDP package is vulnerable to PL/SQL injection. This vulnerability may allow a remote, authenticated attacker to execute arbitrary PL/SQL commands on a vulnerable Oracle installation. Description The Oracle SYS.DBMSCDCIMPDP package is vulnerable to PL/SQL injection...

9CVSS7AI score0.03131EPSS
SaveExploits0References4
CERT
CERT
added 2006/10/11 12:00 a.m.42 views

Microsoft Office fails to properly parse malformed strings

Overview A vulnerability in the way Microsoft Office parses files with malformed strings may lead to execution of arbitrary code. Description Microsoft Office contains a vulnerability that could be exploited when parsing specially crafted strings. According to Microsoft Security Bulletin...

9.3CVSS6.9AI score0.29568EPSS
SaveExploits0References1
CERT
CERT
added 2006/10/10 12:00 a.m.42 views

Microsoft .NET Framework contains a cross-site scripting vulnerability

Overview The Microsoft .NET Framework contains a cross-site scripting vulnerability that may allow an attacker to read or modify data in web pages and cookies. Description The Microsoft .NET Framework is a managed code programming model for Microsoft Windows operating systems. Microsoft ASP.NET i...

4.3CVSS5.4AI score0.37766EPSS
SaveExploits0References2
CERT
CERT
added 2006/09/12 12:00 a.m.42 views

Microsoft Publisher does not adequately validate Publisher documents

Overview Microsoft Publisher does not adequately validate Publisher documents. This results in a buffer overflow vulnerability that could allow an attacker to execute arbitrary code with the privileges of the user running Publisher. Description Microsoft Publisher does not adequately validate...

9.3CVSS7.4AI score0.41966EPSS
SaveExploits1References6
CERT
CERT
added 2006/08/08 12:00 a.m.42 views

Microsoft Management Console cross-site scripting vulnerability

Overview Microsoft Management Console MMC is vulnerable to cross-site scripting, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description MMCMMC is an application that allows a user to perform administrative tasks. Through the use of various snap-ins, MMC ca...

6CVSS6.2AI score0.20488EPSS
SaveExploits0References2
CERT
CERT
added 2006/08/01 12:00 a.m.42 views

eIQnetworks Enterprise Security Analyzer Syslog server buffer overflow

Overview The eIQnetworks Enterprise Security Analyzer Syslog server contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Enterprise Security Analyzer eIQnetworks Enterprise Security Analyzer ESA...

10CVSS7.4AI score0.73562EPSS
SaveExploits12References10
CERT
CERT
added 2006/06/13 12:00 a.m.42 views

Microsoft Windows ART image handling buffer overflow

Overview Microsoft Windows ART image handling routines are vulnerable to a heap-based buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description ART Images According to Microsoft Security Bulletin MS06-022: ART is...

6.8CVSS7.5AI score0.34789EPSS
SaveExploits0References2
CERT
CERT
added 2006/03/29 12:00 a.m.42 views

Symantec VERITAS NetBackup Volume Manager daemon buffer overflow

Overview The Symantec VERITAS NetBackup Volume Manager daemon contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code. Description Symantec VERITAS NetBackup Symantec VERITAS NetBackup is a client/server based backup software solution...

9CVSS7.4AI score0.07927EPSS
SaveExploits4References3
CERT
CERT
added 2006/03/14 12:00 a.m.42 views

Microsoft Excel malformed description memory corruption vulnerability

Overview Microsoft Excel contains a memory corruption vulnerability. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel fails to properly validate description fields in Excel data files. When a file with a malformed...

5.1CVSS7.1AI score0.14633EPSS
SaveExploits0References1
CERT
CERT
added 2005/08/17 12:00 a.m.42 views

Apple Mac OS X Safari vulnerable to arbitrary command execution via URLs in PDF files

Overview Apple Mac OS X WebKit and Safari security controls may be bypassed, possibly allowing remote command execution. Description Mac OS X includes the Safari web browser, which can display Portable Document Format PDF files directly. This functionality is part of the WebKit system framework...

5.1CVSS9.2AI score0.04297EPSS
SaveExploits0References3
CERT
CERT
added 2005/07/13 12:00 a.m.42 views

WebEOC privileges are based on client-side authorization

Overview WebEOC ties privileges and roles to client-side resources. If an attacker can access a resource directly, that attacker will be granted all the privileges associated with that resource. Description WebEOC is a web-based crisis information management application that provides functions to...

10CVSS6.3AI score0.02191EPSS
SaveExploits0References3
CERT
CERT
added 2005/06/14 12:00 a.m.42 views

Microsoft Server Message Block vulnerable to buffer overflow

Overview Microsoft Server Message Block SMB is vulnerable to a buffer handling flaw when processing incoming SMB packets that may lead to remote code execution. Description Server Message Block is a protocol which allows sharing of files, printers, serial ports, and other abstractions. The SMB...

7.5CVSS7.6AI score0.70277EPSS
SaveExploits0References2
CERT
CERT
added 2005/05/09 12:00 a.m.42 views

Apple Mac OS X Server Admin fails to properly restrict users from using the proxy service

Overview The Apple Mac OS X Server HTTP proxy service does not restrict access by default and may allow unintended remote users to use the service. Description Mac OS X Server includes a service to provide for HTTP proxying. The HTTP proxy service does not include any access restrictions in the...

7.5CVSS6AI score0.01307EPSS
SaveExploits0References2
CERT
CERT
added 2005/02/21 12:00 a.m.42 views

Gaim vulnerable to malformed SNAC packet infinite processing loop

Overview Gaim contains a flaw in the processing of certain packets that may cause a denial of service. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar protocol, MSN Messenger,...

5CVSS6.1AI score0.05296EPSS
SaveExploits0References2
CERT
CERT
added 2005/02/08 12:00 a.m.42 views

Microsoft Internet Explorer contains a Channel Definition Format (CDF) cross-domain vulnerability

Overview Microsoft Internet Explorer contains a vulnerability that may allow unintended information disclosure or remote code execution due to a flaw in handling Channel Definition Format CDF files. Description From the Microsoft Channel Definition Format description:Channel Definition Format CDF...

5.1CVSS7.2AI score0.28331EPSS
SaveExploits1References6
CERT
CERT
added 2005/02/04 12:00 a.m.42 views

Squid LDAP authentication routines fail to check for invalid input

Overview The Squid LDAP authentication routine squidldapauth fails to check for input characters, such as whitespace, that could be misused to possibly bypass access restrictions. Description Squid functions as a web proxy and cache application for a number of protocols, and includes support for...

7.5CVSS6.6AI score0.31942EPSS
SaveExploits0References3
CERT
CERT
added 2005/01/07 12:00 a.m.42 views

Microsoft Windows kernel vulnerable to denial-of-service condition via animated cursor (.ani) rate number

Overview A vulnerability exists in the way the Microsoft Windows kernel processes animated cursor .ani files with a rate number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...

5CVSS5.7AI score0.58579EPSS
SaveExploits1References4
CERT
CERT
added 2004/10/18 12:00 a.m.42 views

Microsoft Internet Explorer contains a buffer overflow in CSS parsing

Overview A buffer overflow vulnerability exists in the way that Microsoft Internet Explorer processes Cascading Style Sheets CSS. This may allow an attacker to execute arbitrary code or cause a denial of service. Description CSS is a mechanism for adding style to web documents. Microsoft Internet...

7.5CVSS8AI score0.56607EPSS
SaveExploits2References4
CERT
CERT
added 2004/08/27 12:00 a.m.42 views

isakmpd fails to handle ISAKMP packets with "Payload Length" of zero

Overview A vulnerability exists in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security Association and Key Manageme...

5CVSS6.3AI score0.03182EPSS
SaveExploits0
CERT
CERT
added 2004/04/14 12:00 a.m.42 views

Microsoft Windows contains buffer overflow in processing of WMF and EMF image formats

Overview A vulnerability exists in the APIs that handle Microsoft Windows Metafiles WMF and Enhanced Metafiles EMF image formats. Exploitation may lead to an attacker executing arbitrary code on the system. Description The code that renders Windows Metafiles WMF and Enhanced Metafiles EMF image...

7.6CVSS7.7AI score0.25245EPSS
SaveExploits0References2
CERT
CERT
added 2004/03/22 12:00 a.m.42 views

Oracle Application Server Web Cache contains heap overflow vulnerability

Overview Oracle Application Server Web Cache contains a heap overflow vulnerability in the handling of client requests that could result in arbitrary code execution. Description The Oracle Web Cache acts as a reverse proxy, caching static and dynamic content generated from Oracle Application web...

10CVSS7.4AI score0.15501EPSS
SaveExploits0References7
CERT
CERT
added 2004/03/15 12:00 a.m.42 views

Apple Mac OS X "cd9660.util" buffer overflow

Overview A component utility in Apple's Mac OS X operating system suffers from a buffer overflow vulnerability in its handling of command-line arguments. This vulnerability could allow a local attacker to gain elevated privileges on the vulnerable system. Description Apple's Mac OS X operating...

7.2CVSS6.9AI score0.01292EPSS
SaveExploits2References1
CERT
CERT
added 2003/12/29 12:00 a.m.42 views

GnuPG creates ElGamal keys for signing using insufficient entropy

Overview Gnu Privacy Guard GnuPG is a cryptographic utility used to generate cryptographic keys and perform other cryptographic functions. A vulnerability in the way GnuPG generates ElGamal keys has been discovered. This vulnerability renders ElGamal signing key untrustworthy. Description A...

5CVSS5.9AI score0.02854EPSS
SaveExploits1References5
CERT
CERT
added 2003/12/20 12:00 a.m.42 views

Microsoft Internet Explorer does not properly display URLs

Overview Microsoft Internet Explorer does not properly display the location of HTML documents. An attacker could exploit this behavior to mislead users into revealing sensitive information. Description Web browsers frequently display the Uniform Resource Locator URL in the address bar. Users expe...

4.3CVSS7.4AI score0.26912EPSS
SaveExploits4References21
CERT
CERT
added 2003/08/26 12:00 a.m.42 views

Microsoft Windows BR549.DLL ActiveX control contains vulnerability

Overview The Microsoft Windows BR549.DLL ActiveX control, which provides support for the Windows Reporting Tool, contains an unknown vulnerability. The impact of this vulnerability is not known. Description Microsoft Security Bulletin MS03-032 briefly describes a vulnerability in the BR549.DLL...

7.5CVSS7.8AI score0.30387EPSS
SaveExploits0References8
CERT
CERT
added 2003/06/24 12:00 a.m.42 views

Apache HTTPD contains denial of service vulnerability in basic authentication module

Overview The Apache HTTP server contains a denial-of-service vulnerability that allows remote attackers to to conduct denial-of-service attacks on the HTTP basic authentication module of an affected server. Description The Apache HTTP server contains a denial-of-service vulnerability in the...

8.1AI score
SaveExploits0References3
CERT
CERT
added 2003/04/30 12:00 a.m.42 views

ScriptLogic sets insecure permissions on "LOGS$" share

Overview Version 4.01 of ScriptLogic contains a vulnerability in the default permissions assigned to the network share used for logging. Description The ScriptLogic product from ScriptLogic, Inc. provides remote system administration capabilities for Microsoft Windows systems in a domain...

7AI score
SaveExploits0References1
CERT
CERT
added 2002/10/18 12:00 a.m.42 views

Avaya switches contains multiple undocumented accounts allowing full administrative access to the device

Overview Multiple Avaya switches do not adequately protect privileged access. Description Avaya's P882, P880, P580, and P550R series switches do not adequately protect account access. As a result, a remote attacker can gain access to the switch via http or telnet. --- Impact A remote attacker can...

7.5CVSS8.5AI score0.03283EPSS
SaveExploits0References4
CERT
CERT
added 2002/10/10 12:00 a.m.42 views

ypxfrd daemon fails to properly validate user supplied arguments in "getdbm" procedure

Overview A vulnerability in the ypxfrd daemon may allow a local attacker to read arbitrary files on the vulnerable system. Description Janusz Niewiadomski, of iSEC, discovered this vulnerability and produced the following advisory.Issue: ====== Improper arguments validation in ypxfrd may allow...

5CVSS6AI score0.02238EPSS
SaveExploits0References2
CERT
CERT
added 2002/09/27 12:00 a.m.42 views

Microsoft Internet Explorer allows read access to local files via incorrect VBScript handling

Overview A vulnerability in the cross-domain frame security model of Internet Explorer may allow remote attackers to view the contents of local files when a user views a malicious web page. Description There's a vulnerability in the cross-domain frame security model of Internet Explorer that may...

5CVSS6AI score0.18223EPSS
SaveExploits0References3
CERT
CERT
added 2002/09/24 12:00 a.m.42 views

Microsoft Internet Explorer (MSIE) Content-Disposition vulnerabilities

Overview Microsoft Internet Explorer IE may handle executable content automatically, opening it with another application on the client host that may, in turn, instruct the operating system to execute the file. Description IE does not properly verify the Content-Disposition and Content-Type header...

7.5CVSS7.5AI score0.33339EPSS
SaveExploits1References2
CERT
CERT
added 2002/08/22 12:00 a.m.42 views

Novell Netware RCONAG6 fails to validate user password when "Secure IP" is used to establish connection

Overview Novell Netware RCONAG6 allows users to gain access to the server without a password. Description Novell Netware RCONAG6 allows users to remotely administer a Novell host. A vulnerability in RCONAG6 makes it possible for a remote user to connect to the server without supplying a password...

7.5CVSS6.6AI score0.03317EPSS
SaveExploits0References1
CERT
CERT
added 2002/08/16 12:00 a.m.42 views

Microsoft Windows SQL Server allows arbitrary queries to be executed via "xp_displayparamstmt" extended procedure

Overview MS SQL Server contains an extended stored procedure with inappropriate permission settings. Description Microsoft SQL Server 7.0 and Microsoft SQL Server 2000 contain an extended stored procedure, xpdisplayparamstmt , that permits an unprivileged user of a database to gain administrative...

10CVSS6.6AI score0.46307EPSS
SaveExploits1References2
CERT
CERT
added 2002/08/08 12:00 a.m.42 views

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

Overview The XFS journaling filesystem daemon uses a call to popen3 with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon xfsmd on SGI systems use...

10CVSS7.3AI score0.03622EPSS
SaveExploits0References5
CERT
CERT
added 2002/07/29 12:00 a.m.42 views

util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility

Overview The util-linux package contains a race condition vulnerability that can be used to elevate privileges on the system. Description util-linux is shipped with Red Hat Linux and numerous other Linux distributions. It contains a collection of utility programs, such as fstab, mkfs, and chfn. T...

6.2CVSS5.8AI score0.00529EPSS
SaveExploits0References1
CERT
CERT
added 2002/07/15 12:00 a.m.42 views

Uudecode performs inadequate checks on user-specified output files

Overview The uudecode utility contains a vulnerability that allows an attacker to overwrite arbitrary files, symbolic links, and named pipes. Description The uudecode utility is used to decode files that have been encoded in the 7-bit printable format generated by uuencode. This format allows for...

7.2CVSS6.1AI score0.00622EPSS
SaveExploits0References3
CERT
CERT
added 2002/03/29 12:00 a.m.42 views

Microsoft Internet Explorer Permits Remote Command Execution Through <OBJECT> Tag

Overview Microsoft Internet Explorer IE permits the remote execution of arbitrary commands via the tag. Description A vulnerability exists in the way that Microsoft Internet Explorer IE handles tags. If the CLASSID CLSID is unrecognized, then Internet Explorer will execute arbitrary commands...

7.5CVSS6.7AI score0.11471EPSS
SaveExploits0References7
CERT
CERT
added 2002/03/04 12:00 a.m.42 views

Squid Proxy Server contains buffer overflow in parsing of the authentication portion of FTP URLs

Overview There is a remotely exploitable buffer overflow in the Squid proxy/cache server. Exploitation of this vulnerability could lead to an intruder gaining a shell on the target Squid server. Description Squid versions 2.3 and 2.4 are vulnerable to a buffer overflow in the code that parses FTP...

7.5CVSS7.8AI score0.09449EPSS
SaveExploits2References3
CERT
CERT
added 2001/12/20 12:00 a.m.42 views

Microsoft Windows Universal Plug and Play service (UPNP) fails to limit the data returned in response to a NOTIFY message

Overview Microsoft Windows Universal Plug and Play UPnP is vulnerable to a denial-of-service attack that could negatively affect the performance of vulnerable machines. Description Universal Plug and Play UPnP is a system designed to allow network devices to operate together. One of the UPnP...

5CVSS6AI score0.43764EPSS
SaveExploits0References7
CERT
CERT
added 2001/11/15 12:00 a.m.42 views

Digital Unix msgchk vulnerable to file contents disclosure via symlink redirection of profile

Overview msgchk, a part of the MH mail system, reads the user's .mhprofile in order to obtain configuration options. If the .mhprofile is linked to another file with illegal format, the first line of that file will be displayed in an error message by msgchk. Description msgchk is the portion of t...

2.1CVSS6AI score0.01107EPSS
SaveExploits2References1
CERT
CERT
added 2001/09/18 12:00 a.m.42 views

Microsoft Windows 2000 Telnet Service uses named pipes with predictable names

Overview The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows unprivileged local users to execute arbitrary code with elevated privileges. Description The Microsoft Windows 2000 Telnet Service creates a named pipe to share information between the processes that handle ea...

6.9AI score
SaveExploits0References5
CERT
CERT
added 2000/11/16 12:00 a.m.42 views

MS ActiveMovieControl Object downloads arbitrary files

Overview Description This vulnerability is actually the same as the Cache Bypass issue described in VU38950. This document is provided for people looking for information based on publicly available exploits using the Active Movie control. The flaw is not in the Active Movie control per se, but...

7.5CVSS7AI score0.07402EPSS
SaveExploits1References3
CERT
CERT
added 2000/11/03 12:00 a.m.42 views

Passwords sent via SSH encrypted with RC4 can be easily cracked

Overview Passwords sent using SSH with RC4 encryption can be easily cracked by an attacker who is able to capture and replay the session. This problem occurs for three reasons: SSH sessions can be replayed, the RC4 encryption algorithm has some specific weaknesses, and the SSH daemon provides too...

6.9AI score
SaveExploits0References2
CERT
CERT
added 2000/10/25 12:00 a.m.42 views

IE 5.01 will execute VBA code contained in Access databases when triggered from HTML code contained in an IFRAME

Overview Under certain conditions, Internet Explorer can open Microsoft Access database or project files containing malicious code and execute the code without giving a user prior warning. Access files that are referenced by OBJECT tags in HTML documents can allow attackers to execute arbitrary...

7.5CVSS7.6AI score0.2477EPSS
SaveExploits0References6
CERT
CERT
added 2000/09/26 12:00 a.m.42 views

Denial of Service Attack in NetBIOS Services

Overview The NetBIOS Name Service NBNS provides a means for hostname and address mapping on a NetBIOS-aware network. The NetBIOS over TCP/IP protocols including NBNS are described in the Internet Engineering Task Force IETF Request for Comments RFC1001 and RFC1002. These protocols do not specify ...

5CVSS6.2AI score0.32903EPSS
SaveExploits2References16
CERT
CERT
added 2022/01/20 12:00 a.m.41 views

McAfee Agent for Windows is vulnerable to privilege escalation due to OPENSSLDIR location

Overview McAfee Agent contains a privilege escalation vulnerability due to the use of an OPENSSLDIR variable that specifies a location where an unprivileged Windows user may be able to place files. Description CVE-2022-0166 McAfee Agent, which comes with various McAfee products such as McAfee...

7.8CVSS7.9AI score0.02945EPSS
SaveExploits0References2
CERT
CERT
added 2020/01/14 12:00 a.m.41 views

Content Delivery Networks handle HTTP headers in different and unexpected ways

Overview A Content Delivery Network CDN is a distributed network of proxy servers that deliver web content collected from a back end web server using a temporary local storage called a cache. HTTP cache poisoning is a type of attack that allows a remote attacker to inject arbitrary content using...

6.6AI score
SaveExploits0References8
CERT
CERT
added 2017/03/06 12:00 a.m.41 views

dotCMS contains multiple vulnerabilities

Overview The dotCMS administration panel is vulnerable to cross-site request forgery, and the "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal and arbitrary file upload. dotCMS versions 3.7.1 and earlier are affected. Description CWE-352: Cross-Site Request Forgery CSRF...

9.3CVSS8.4AI score0.06546EPSS
SaveExploits0References4
CERT
CERT
added 2016/10/20 12:00 a.m.41 views

Synology NAS servers contain insecure default credentials

Overview Synology NAS servers DS107, DS116, and DS213, use default credentials. Description CWE-255: Credentials Management - CVE-2016-6554Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials o...

10CVSS9.7AI score0.0413EPSS
SaveExploits0References3
Total number of security vulnerabilities3724