Lucene search
+L
CertMost viewed

3733 matches found

CERT
CERT
•added 2006/10/11 12:00 a.m.•43 views

Microsoft Office fails to properly parse malformed chart records

Overview A vulnerability in the way Microsoft Office parses files containing malformed chart records may lead to execution of arbitrary code. Description Microsoft Office fails to properly handle malformed chart records. According to Microsoft Security Bulletin MS06-062:When Office opens a...

9.3CVSS7AI score0.38655EPSS
SaveExploits0References1
CERT
CERT
•added 2006/10/11 12:00 a.m.•43 views

Microsoft Office fails to properly parse malformed strings

Overview A vulnerability in the way Microsoft Office parses files with malformed strings may lead to execution of arbitrary code. Description Microsoft Office contains a vulnerability that could be exploited when parsing specially crafted strings. According to Microsoft Security Bulletin...

9.3CVSS6.9AI score0.29644EPSS
SaveExploits0References1
CERT
CERT
•added 2006/10/10 12:00 a.m.•43 views

Microsoft Excel fails to properly handle Lotus 1-2-3 files

Overview Microsoft Excel contains a vulnerability in the handling of malformed Lotus 1-2-3 files, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel contains an unspecified vulnerability that could be exploited when Exc...

5.1CVSS6.9AI score0.09348EPSS
SaveExploits0References2
CERT
CERT
•added 2006/10/02 12:00 a.m.•43 views

Apple kernel exception handling vulnerability

Overview Apple Mac OS X may be vulnerable to privilege escalation via the Mach exception ports in the kernel. This vulnerability may allow a local user to execute arbitrary code with elevated privileges. Description Mach 3.0 is an open source microkernel used by Mac OS X that provides memory...

7.2CVSS6.8AI score0.0158EPSS
SaveExploits6References3
CERT
CERT
•added 2006/09/27 12:00 a.m.•43 views

Microsoft Windows WebViewFolderIcon ActiveX integer overflow

Overview The Microsoft Windows WebViewFolderIcon ActiveX control contains an integer overflow vulnerability. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft WebViewFolderIcon object is an ActiveX control that comes with...

9.3CVSS6.9AI score0.63817EPSS
SaveExploits13References11
CERT
CERT
•added 2006/09/15 12:00 a.m.•43 views

Microsoft DirectAnimation Path ActiveX control fails to validate input

Overview The Microsoft DirectAnimation Path ActiveX control fails to properly validate input. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft DirectAnimation Path object is an ActiveX control that is used to move object...

7.6CVSS6.5AI score0.79781EPSS
SaveExploits4References5
CERT
CERT
•added 2006/08/08 12:00 a.m.•43 views

Microsoft Internet Explorer HTML layout rendering vulnerability

Overview Microsoft Internet Explorer fails to properly render certain HTML layout combinations. This can allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Internet Explorer contains a vulnerability in the rendering of certain HTML layout combinations...

5.1CVSS6.9AI score0.43757EPSS
SaveExploits1References3
CERT
CERT
•added 2006/08/04 12:00 a.m.•43 views

Apple Mac OS X Image RAW vulnerable to buffer overflow via specially crafted Canon RAW image

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code on an affected system. Description RAW image files provide access to image information directly from a camera's sensor prior to in-camera processing, retaining the...

5.1CVSS7.6AI score0.03167EPSS
SaveExploits1References2
CERT
CERT
•added 2006/08/01 12:00 a.m.•43 views

eIQnetworks Enterprise Security Analyzer Syslog server buffer overflow

Overview The eIQnetworks Enterprise Security Analyzer Syslog server contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Enterprise Security Analyzer eIQnetworks Enterprise Security Analyzer ESA...

10CVSS7.4AI score0.73562EPSS
SaveExploits12References10
CERT
CERT
•added 2006/06/13 12:00 a.m.•43 views

Microsoft Windows ART image handling buffer overflow

Overview Microsoft Windows ART image handling routines are vulnerable to a heap-based buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description ART Images According to Microsoft Security Bulletin MS06-022: ART is...

6.8CVSS7.5AI score0.34789EPSS
SaveExploits0References2
CERT
CERT
•added 2006/06/05 12:00 a.m.•43 views

TIBCO Rendezvous daemon components contain a buffer overflow in the HTTP administrative interface

Overview A vulnerability in the TIBCO Rendezvous daemon components may allow a remote attacker to execute arbitrary code on an affected system. Description TIBCO Rendezvous is a distributed messaging software platform. A buffer overflow vulnerability has been discovered in the HTTP administrative...

8.6AI score
SaveExploits0References2
CERT
CERT
•added 2006/06/02 12:00 a.m.•43 views

Mozilla contains multiple memory corruption vulnerabilities

Overview Mozilla contains several memory corruption vulnerabilities. This may allow a remote attacker to execute arbitrary code. Description Mozilla team members have discovered multiple vulnerabilities that cause the browser engine to crash. In certain circumstances, these vulnerabilities may...

9.3CVSS7.4AI score0.0696EPSS
SaveExploits0References2
CERT
CERT
•added 2006/06/02 12:00 a.m.•43 views

Mozilla privilege escalation using addSelectionListener

Overview A privilege escalation vulnerability exists in the Mozilla addSelectionListener method. This may allow a remote attacker to execute arbitrary code. Description addSelectionListener Web content can add a SelectionListener to the Selection object by using addSelectionListener method of the...

7.5CVSS6.9AI score0.06027EPSS
SaveExploits0References5
CERT
CERT
•added 2006/05/15 12:00 a.m.•43 views

Apple QuickTime FlashPix integer overflow

Overview Apple QuickTime fails to properly handle FlashPix images. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service condition. Description Apple's QuickTime Player is multimedia software that allows users to view local and remo...

6.8CVSS7.5AI score0.05984EPSS
SaveExploits0
CERT
CERT
•added 2006/04/01 12:00 a.m.•43 views

RealNetworks products vulnerable to buffer overflow via specially crafted MBC file

Overview Numerous RealNetworks products are vulnerable to a buffer overflow that may allow a remote attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer RealNetworks RealPlayer is a multimedia application that allows users to view local and remote...

9.3CVSS7.5AI score0.02939EPSS
SaveExploits0References6
CERT
CERT
•added 2006/03/03 12:00 a.m.•43 views

Apple Safari vulnerable to buffer overflow

Overview Apple Safari is vulnerable to a stack-based buffer overflow. This may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Safari Apple Safari is a web browser that comes with the Mac OS X operating system. The Problem Apple Safari contains a stack-based...

6.4CVSS6.9AI score0.07754EPSS
SaveExploits0References2
CERT
CERT
•added 2006/02/13 12:00 a.m.•43 views

Microsoft HTML Help Workshop buffer overflow

Overview A buffer overflow in Microsoft HTML Help Workshop may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft HTML Help provides a standard help system for the Windows operating system. HTML Help Workshop is a component of the software development...

7.5CVSS7.1AI score0.71697EPSS
SaveExploits11References5
CERT
CERT
•added 2006/01/11 12:00 a.m.•43 views

Apple QuickTime and iTunes QTIF image buffer overflow

Overview Apple QuickTime contains a heap-based buffer overflow that may allow an attacker to execute arbitrary code or cause a denial-of-service condition. Description Apple QuickTime fails to properly validate QuickTime Images QTIF, potentially allowing a heap-based buffer overflow to occur. If ...

7.5CVSS7.5AI score0.25506EPSS
SaveExploits6References6
CERT
CERT
•added 2005/12/21 12:00 a.m.•43 views

VMware NAT Service vulnerable to buffer overflow via FTP PORT/EPRT commands

Overview The VMware NAT Service used in multiple VMware products contains a buffer overflow in the way it handles FTP PORT and EPRT commands. An attacker could execute arbitrary code with the privileges of the NAT service or cause a denial of service. Description VMware virtualization software...

10CVSS7.7AI score0.14235EPSS
SaveExploits1References9
CERT
CERT
•added 2005/08/17 12:00 a.m.•43 views

Apple Safari fails to perform security checks on links in rich text content

Overview Apple Safari fails to perform security checks on hyperlinks in rich text content, which may allow an attacker to execute arbitrary commands on a vulnerable system. Description Mac OS X includes the Safari web browser, which can display rich text RTF files directly. When Safari opens a ri...

7.5CVSS9.4AI score0.04767EPSS
SaveExploits0References2
CERT
CERT
•added 2005/07/13 12:00 a.m.•43 views

MIT Kerberos 5 allows unauthenticated attacker to cause MIT krb5 Key Distribution Center to free unallocated memory

Overview An unauthenticated attacker can cause MIT krb5 Key Distribution Center KDC to free unallocated memory, possibly leading to arbitrary code execution. Description Kerberos is a network authentication system which uses a trusted third party a KDC to authenticate clients and servers to each...

5CVSS9.9AI score0.05221EPSS
SaveExploits0References2
CERT
CERT
•added 2005/06/07 12:00 a.m.•43 views

Adobe Acrobat and Acrobat Reader vulnerable to information disclosure via "LoadFile()" method in ActiveX control

Overview Adobe Acrobat Reader and Acrobat web control contain a flaw that allows the existence of local files to be discovered. Description The Adobe Acrobat Internet Explorer ActiveX web control may disclose the existence of local files if the LoadFile method is called with the complete file nam...

5.1CVSS5.7AI score0.03222EPSS
SaveExploits0References3
CERT
CERT
•added 2005/05/16 12:00 a.m.•43 views

Apple Mac OS X chpass/chfn/chsh utilities do not properly validate external programs

Overview Apple Mac OS X Directory Service utilities use external programs insecurely, potentially allowing an attacker to execute arbitrary code. Description The OS X Directory Services have three utilities chpass, chfn, and chsh to update information in the user database, such as user name,...

7.2CVSS7AI score0.00764EPSS
SaveExploits0References5
CERT
CERT
•added 2005/04/13 12:00 a.m.•43 views

Microsoft font processing buffer overflow vulnerability

Overview A privilege elevation vulnerability exists in the way that Microsoft Windows processes certain fonts. This vulnerability could allow a logged on user to take complete control of the system. Description Due to an unchecked buffer in the processing of malicious fonts, a locally authenticat...

7.2CVSS7.2AI score0.01724EPSS
SaveExploits0References1
CERT
CERT
•added 2005/04/01 12:00 a.m.•43 views

Multiple Telnet Clients vulnerable to buffer overflow via the env_opt_add() function in telnet.c

Overview Multiple Telnet clients contain a data length validation flaw that may allow a malicious server to execute arbitrary code on the client host with privs of client. Description The Telnet network protocol is described in RFC854 and RFC855 as a general, bi-directional communications facilit...

9.5AI score
SaveExploits0References5
CERT
CERT
•added 2005/02/21 12:00 a.m.•43 views

OpenConnect Webconnect read-only directory traversal vulnerability in jretest.html

Overview OpenConnect Webconnect contains a read-only directory traversal vulnerability in the file jretest.html. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1 running o...

5CVSS6AI score0.12251EPSS
SaveExploits2References2
CERT
CERT
•added 2005/02/11 12:00 a.m.•43 views

OpenPGP vulnerable to chosen-ciphertext attacks in cipher feedback (CFB) mode

Overview A vulnerability in OpenPGP may allow attackers to recover partial plaintexts from OpenPGP messages that use symmetric encryption. Description A vulnerability in OpenPGP can be used by attackers to recover partial plaintexts from messages employing symmetric encryption. Researchers Serge...

5CVSS5.4AI score0.02946EPSS
SaveExploits0References3
CERT
CERT
•added 2005/02/09 12:00 a.m.•43 views

Microsoft ASP.NET fails to perform proper canonicalization

Overview Microsoft ASP.NET contains a canonicalization vulnerability that may allow a remote unauthenticated attacker to gain access to secure contents. Description Microsoft ASP.NET is a programming framework for creating web applications. The canonicalization routine used by ASP.NET fails to...

9.8CVSS9.4AI score0.75702EPSS
SaveExploits2References11
CERT
CERT
•added 2004/12/22 12:00 a.m.•43 views

Microsoft Internet Explorer HTML Help control bypasses Local Machine Zone Lockdown

Overview The Microsoft Internet Explorer HTML Help ActiveX control is not restricted by the Local Machine Zone Lockdown feature. This can allow an attacker to execute script in the Local Machine Zone. Description Windows XP SP2 introduces a feature called Local Machine Zone Lockdown. This feature...

10CVSS6.2AI score0.20239EPSS
SaveExploits0References6
CERT
CERT
•added 2004/09/07 12:00 a.m.•43 views

Ethereal fails to properly handle malformed SMB packets

Overview Ethereal contains a vulnerability in the way it processes Server Message Block SMB packets. Description The Server Message Block SMB protocol is used for sharing files, printers, and other resources between computers. SMB is used in Microsoft Windows to provide file and print services...

5CVSS6.2AI score0.05275EPSS
SaveExploits0References11
CERT
CERT
•added 2004/06/30 12:00 a.m.•43 views

Juniper JUNOS Packet Forwarding Engine (PFE) IPv6 memory leak

Overview The Juniper JUNOS Packet Forwarding Engine PFE leaks memory when certain IPv6 packets are submitted for processing. If an attacker submits multiple packets to a vulnerable router running IPv6-enabled PFE, the router can be repeatedly rebooted, essentially creating a denial of service for...

5CVSS6.5AI score0.03193EPSS
SaveExploits0References3
CERT
CERT
•added 2004/06/22 12:00 a.m.•43 views

ISC DHCP contains a stack buffer overflow vulnerability in handling log lines containing ASCII characters only

Overview The Internet Systems Consortium's ISC Dynamic Host Configuration Protocol DHCP 3 application contains a buffer overflow vulnerability. Exploitation of this vulnerability can cause a denial of service condition to the DHCP Daemon DHCPD and may permit a remote attacker to execute arbitrary...

10CVSS7.8AI score0.45333EPSS
SaveExploits0
CERT
CERT
•added 2004/04/14 12:00 a.m.•43 views

Microsoft Windows Help and Support Center (HCP) fails to validate HCP URLs

Overview A remotely exploitable vulnerability exists in the Help and Support Center HCP. An attacker could compromise the victim's system by tricking them into visiting a malicious web site, or viewing a malicious email message. Description A failure to filter special characters, such as quotes,...

5.1CVSS7.4AI score0.21852EPSS
SaveExploits0References2
CERT
CERT
•added 2004/03/24 12:00 a.m.•43 views

Ethereal fails to properly parse NetFlow UDP packets with an overly large template_entry count

Overview Ethereal fails to properly parse v9template structures in NetFlow UDP packets with an overly large templateentry count. This could allow an attacker to execute arbitrary code. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing...

5CVSS7.8AI score0.67092EPSS
SaveExploits2References3
CERT
CERT
•added 2004/03/23 12:00 a.m.•43 views

util-linux login program discloses sensitive information

Overview util-linux login program uses a pointer that was previously freed and reallocated which could allow an attacker to gain access to sensitive information. Description util-linux is shipped with Red Hat and numerous other Linux distributions. It contains a collection of utility programs, su...

5CVSS6AI score0.03332EPSS
SaveExploits0References3
CERT
CERT
•added 2003/12/29 12:00 a.m.•43 views

GnuPG creates ElGamal keys for signing using insufficient entropy

Overview Gnu Privacy Guard GnuPG is a cryptographic utility used to generate cryptographic keys and perform other cryptographic functions. A vulnerability in the way GnuPG generates ElGamal keys has been discovered. This vulnerability renders ElGamal signing key untrustworthy. Description A...

5CVSS5.9AI score0.02854EPSS
SaveExploits1References5
CERT
CERT
•added 2003/10/27 12:00 a.m.•43 views

Linux groff utility pic contains format string vulnerability

Overview The pic component of the image processing package groff contains a format string vulnerability that could allow a remote attacker to execute arbitrary code. Description groff is an image processing package on Linux systems. A component of groff called pic contains a format-string...

7.5CVSS6.9AI score0.11438EPSS
SaveExploits2References1
CERT
CERT
•added 2003/10/16 12:00 a.m.•43 views

Microsoft Windows ListBox and ComboBox controls vulnerable to buffer overflow when supplied crafted Windows message

Overview There is a buffer overflow in a function called by the Microsoft Windows ListBox and ComboBox controls that could allow an attacker to execute arbitrary code with privileges of the process hosting the controls. Description Processes that run on Windows use messages in order to interact...

7.2CVSS7.2AI score0.43036EPSS
SaveExploits2References4
CERT
CERT
•added 2003/08/19 12:00 a.m.•43 views

gtop daemon contains buffer overflow

Overview A buffer overflow exists in the gtop daemon. Description A buffer overflow in gtopd, specifically permitted, may allow a remote attacker to execute arbitrary code. For more detailed information, please see Flavio Veloso's analysis.gtop background information Many Unix systems allow only...

7.5CVSS7.2AI score0.06053EPSS
SaveExploits0References2
CERT
CERT
•added 2003/07/24 12:00 a.m.•43 views

Microsoft SQL Server contains flaw in checking method for the named pipe

Overview A vulnerability in Microsoft SQL Server may allow an attacker to hijack a named pipe. An attacker may be able to leverage this vulnerability to gain elevated privileges. Description Microsoft describes a named pipe as, "a specifically named one-way or two-way channel for communication...

7.2CVSS6.4AI score0.02262EPSS
SaveExploits0References12
CERT
CERT
•added 2003/07/24 12:00 a.m.•43 views

Microsoft Windows DirectX MIDI library does not adequately validate Text or Copyright parameters in MIDI files

Overview A Microsoft Windows DirectX library, quartz.dll, does not properly validate certain parameters in Musical Instrument Digital Interface MIDI files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial of servic...

7.5CVSS7.2AI score0.32667EPSS
SaveExploits0References3
CERT
CERT
•added 2003/04/02 12:00 a.m.•43 views

IBM AIX "secldapclntd" daemon authentication vulnerability

Overview A vulnerability in the secldapclntd daemon in IBM's AIX operating system could allow unauthorized remote users to modify accounts on the system. Description According to the IBM bulletin for this issue:"The secldapclntd daemon accepts requests from the LDAP load module, forwards requests...

7.5CVSS6.3AI score0.02132EPSS
SaveExploits0References4
CERT
CERT
•added 2003/03/20 12:00 a.m.•43 views

TCP/IP implementations handle unusual flag combinations inconsistently

Overview Various vendors' TCP/IP implementations handle packets containing unusual flag combinations in different ways, which may lead to a violation of implicit or explicit security policies. Description Background on TCP/IP Connection Semantics To establish a TCP connection, a client and server...

7.5CVSS7.4AI score0.03742EPSS
SaveExploits1References9
CERT
CERT
•added 2002/11/25 12:00 a.m.•43 views

SSH Secure Shell for Servers fails to remove child process from master process group

Overview A locally exploitable privilege escalation vulnerability exists in SSH Secure Shell versions 2.0.13 - 3.2.1. Description Secure Shell for Servers, developed by SSH Communications Security, does not properly remove the child process from the master process group after non-interactive...

7.7AI score
SaveExploits0References1
CERT
CERT
•added 2002/09/20 12:00 a.m.•43 views

Slash-based bulletin boards contain a "quick login" feature that may disclose username and password

Overview Slash-based bulletin boards contain a vulnerability that may cause users to disclose their username and password to third-party sites. Description As described in the Slashcode FAQ, "Slash is a database-driven news and message board, using Perl, Apache and MySQL." Slash allows web site...

6.9AI score
SaveExploits0References1
CERT
CERT
•added 2002/08/19 12:00 a.m.•43 views

Low BandWidth X proxy vulnerable to buffer overflow via crafted display command line option

Overview A locally exploitable buffer overflow exists in the Low BandWidth X proxy. Description The Low BandWidth X proxy is a component of XFree86 a freely redistributable open-source implementation of the X Window System. The Low BandWidth X proxy allows applications to transparently take...

7.2CVSS6.9AI score0.00514EPSS
SaveExploits0References4
CERT
CERT
•added 2002/08/16 12:00 a.m.•43 views

Microsoft Windows SQL Server allows arbitrary queries to be executed via "xp_execresultset" extended procedure

Overview MS SQL Server contains an extended stored procedure with inappropriate permission settings. Description Microsoft SQL Server 7.0 and Microsoft SQL Server 2000 contain an extended stored procedure, xpexecresultset , that permits an unprivileged user of a database to gain administrative...

10CVSS6.6AI score0.46307EPSS
SaveExploits1References2
CERT
CERT
•added 2002/06/05 12:00 a.m.•43 views

Yahoo! Messenger is vulnerable to DoS via multiple messages from spoofed names

Overview Yahoo! Messenger is an instant messaging client. A report indicates that there is a vulnerability that permits an attacker to spoof the source user name of a Yahoo! Messenger message. Description Yahoo! Messenger permits a user to place users on an ignore list. A vulnerability exists tha...

5CVSS6.2AI score0.03281EPSS
SaveExploits0References3
CERT
CERT
•added 2002/06/05 12:00 a.m.•43 views

Yahoo! Messenger contains buffer overflow in "IMvironment" field

Overview Yahoo! Messenger is an instant messaging client. There is a remotely exploitable buffer overflow vulnerability in the "imv" field of Yahoo! Messenger. Description A remotely exploitable buffer overflow exists in the "imv" field that may permit a remote attacker to execute arbitrary code ...

7.5CVSS7.9AI score0.06955EPSS
SaveExploits0References3
CERT
CERT
•added 2002/06/04 12:00 a.m.•43 views

ISC BIND 9 fails to process additional data chains in responses correctly thereby causing the server to fail an internal consistency check

Overview A denial-of-service vulnerability exists in version 9 of the Internet Software Consortium's ISC Berkeley Internet Name Domain BIND server. ISC BIND versions 8 and 4 are not affected. Exploiting this vulnerability will cause vulnerable BIND servers to shut down. Description BIND is an...

5CVSS6.9AI score0.14218EPSS
SaveExploits0References6
Total number of security vulnerabilities3733