Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2007/06/06 12:00 a.m.38 views

Computer Associates Anti-Virus engine fails to properly handle malformed CAB archives

Overview The Computer Associates Anti-Virus engine contains a stack-based buffer overflow that may allow a remote, unauthenticated attacker to execute arbitrary code. Description The Computer Associates Anti-Virus engine contains a stack-based buffer overflow in the code responsible for processin...

9.3CVSS7.3AI score0.49647EPSS
SaveExploits7References3
CERT
CERT
added 2007/05/25 12:00 a.m.37 views

Apple Mac OS X iChat UPnP buffer overflow

Overview A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service. Description Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle...

10CVSS7.9AI score0.09454EPSS
SaveExploits1References1
CERT
CERT
added 2007/05/16 12:00 a.m.37 views

libpng denial of service vulnerability

Overview The libpng library contains a denial-of-service vulnerability. Description The libpng library can be used to allow other applications to render PNG images.The libpng library contains a denial-of-service vulnerability. From the Libpng-1.2.16-ADVISORY: This vulnerability could be used to...

5CVSS9AI score0.05115EPSS
SaveExploits1References5
CERT
CERT
added 2007/05/08 12:00 a.m.37 views

Microsoft Exchange Outlook Web Access UTF character set label script injection vulnerability

Overview Microsoft Exchange Outlook Web Access OWA fails to properly handle the UTF character set label, which can allow a remote, unauthenticated attacker to execute script within the security context of the OWA user. Description OWA allows users to access their email accounts on a Microsoft...

6.8CVSS6.2AI score0.33148EPSS
SaveExploits0References2
CERT
CERT
added 2007/03/05 12:00 a.m.37 views

WordPress fails to properly sanitize input passed to the iz parameter in wp-includes/theme.php

Overview WordPress fails to properly sanitize input to the iz parameter in wp-includes/theme.php, which could allow a remote, unauthenticated attacker to execute arbitrary commands. Description WordPress is a blogging application that is written in PHP. WordPress 2.1.1 fails to properly sanitize...

7.5CVSS6.6AI score0.27006EPSS
SaveExploits4References4
CERT
CERT
added 2007/02/15 12:00 a.m.37 views

Microsoft Word fails to properly handle malformed strings

Overview A vulnerability in the way Microsoft Word handles malformed Word Document streams could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Word contains a memory corruption vulnerability that could be triggered when Word opens...

7.6CVSS6.9AI score0.2052EPSS
SaveExploits0References9
CERT
CERT
added 2007/02/14 12:00 a.m.37 views

Microsoft Windows fails to properly handle malformed OLE objects embedded in RTF documents

Overview A vulnerability in the way that Microsoft Windows handles OLE objects embedded within RTF documents may allow an attacker to execute arbitrary code. Description Microsoft Object Linking and Embedding OLE is a technology that allows applications to create and edit compound documents...

7.6CVSS6.8AI score0.24644EPSS
SaveExploits0References4
CERT
CERT
added 2007/02/13 12:00 a.m.37 views

Microsoft Internet Explorer fails to properly instantiate COM objects

Overview A vulnerability in the way Microsoft Internet Explorer instantiates COM objects may lead to execution of arbitrary code. Description Component Object Model, or COM objects are used to enable interprocess communication and dynamic object creation within Microsoft Windows. Microsoft Intern...

9.3CVSS7AI score0.31122EPSS
SaveExploits0References3
CERT
CERT
added 2007/01/12 12:00 a.m.37 views

CA BrightStor ARCserve Backup Message Engine RPC buffer overflow

Overview The Computer Associates BrightStor ARCserve Backup Message Engine contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that...

7.5CVSS7.4AI score0.70037EPSS
SaveExploits16References6
CERT
CERT
added 2007/01/09 12:00 a.m.37 views

Kerberos administration daemon may free uninitialized pointers

Overview A vulnerability exists in the Kerberos administration daemon that may allow a remote, unauthenticated user to free uninitialized pointers. Freeing uninitialized pointers corrupts memory in a way that could allow an attacker to execute code. Description The MIT krb 5 administration daemon...

5CVSS9.6AI score0.05381EPSS
SaveExploits0References10
CERT
CERT
added 2007/01/09 12:00 a.m.37 views

Microsoft Excel vulnerable to arbitrary code execution via malformed record

Overview A vulnerability in Microsoft Excel may allow an attacker to execute arbitrary code on a vulnerable system. Description A vulnerability exists in the way Microsoft Excel handles malformed records.Per Microsoft Security Bulletin MS07-002: A remote code execution vulnerability exists in...

9.3CVSS7.3AI score0.3319EPSS
SaveExploits0References6
CERT
CERT
added 2006/12/20 12:00 a.m.37 views

Mozilla mail products vulnerable to heap buffer overflow via Content-Type headers

Overview Mozilla mail products contain a heap buffer overflow vulnerability in the way they process Content-Type headers. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Mozilla Thunderbird and SeaMonkey contain a buffer overflow...

6.8CVSS7.4AI score0.04239EPSS
SaveExploits0References6
CERT
CERT
added 2006/11/29 12:00 a.m.37 views

Apple Mac OS X WebKit deallocated object access vulnerability

Overview Apple Safari WebKit fails to properly deallocate objects. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description According to Apple: WebKit is the open source core of Apple's Safari web browser. It is available as a framework in Mac OS X fo...

6.8CVSS7.1AI score0.05406EPSS
SaveExploits2References3
CERT
CERT
added 2006/11/06 12:00 a.m.37 views

The Red Hat Enterprise Linux 3 SMP Kernel fails to properly handle IPC shared-memory

Overview The Red Hat Enterprise Linux 3 SMP Kernel may allow an authenticated attacker to cause a denial-of-service condition with specially crafted IPC shared-memory functions. Description Inter-Process Communication IPC shared-memory is a method of passing data between programs used by the Red...

5.5CVSS6.2AI score0.00389EPSS
SaveExploits1References3
CERT
CERT
added 2006/10/25 12:00 a.m.37 views

Wireshark contains multiple off-by-one errors in the IPSec ESP preference parser

Overview Wireshark contains a vulnerability in the IPSec ESP preference parser that may cause a denial of service condition. Description Wireshark contains multiple off-by-one vulnerabilities in the IPSec ESP preference parser when the application has been compiled with ESP decryption support.Thi...

5CVSS8AI score0.04389EPSS
SaveExploits0References10
CERT
CERT
added 2006/10/24 12:00 a.m.37 views

Oracle DISABLE_HIERARCHY_INTERNAL procedure vulnerable to PL/SQL injection

Overview The Oracle DISABLEHIERARCHYINTERNAL procedure is vulnerable to PL/SQL injection. This vulnerability may allow a remote, authenticated attacker to execute arbitrary PL/SQL commands on a vulnerable Oracle installation. Description The Oracle DISABLEHIERARCHYINTERNAL procedure fails to...

9CVSS7.1AI score0.03405EPSS
SaveExploits0References3
CERT
CERT
added 2006/10/24 12:00 a.m.37 views

Opera Web Browser fails to properly process overly long URLs

Overview The Opera Web Browser fails to properly process overly long URLs. This vulnerability may allow arbitrary code execution. Description Opera is a multi-platform web browser that is available for a range of operating systems and embedded Internet products. Opera contains a heap buffer...

5.1CVSS7.8AI score0.0476EPSS
SaveExploits0References3
CERT
CERT
added 2006/10/12 12:00 a.m.37 views

Microsoft Word vulnerable to remote code execution

Overview A remote code execution vulnerability in Microsoft Word can allow a remote attacker to execute arbitrary code via a specially crafted mail merge file. Description Microsoft Word contains a remote code execution vulnerability that can be exploited when a specially crafted mail merge file ...

9.3CVSS7.2AI score0.30926EPSS
SaveExploits0References1
CERT
CERT
added 2006/10/11 12:00 a.m.37 views

Microsoft Server Service fails to properly handle network messages

Overview A vulnerability in the way Microsoft Server Service handles network messages may lead to execution of arbitrary code. Description Microsoft Server Service provides support for Remote Proceedure Call RPC, resource sharing, and named pipe communication over the network. Microsoft Server...

9CVSS7.3AI score0.43485EPSS
SaveExploits0References1
CERT
CERT
added 2006/09/29 12:00 a.m.37 views

FileCOPA FTP server vulnerable to buffer overflow

Overview There is a buffer overflow vulnerability in the FileCOPA FTP server which may allow an attacker to execute arbitrary code. Description FileCOPA is an FTP server for Microsoft Windows that supports anonymous file transfers.There is a buffer overflow vulnerability in the FileCOPA FTP servi...

6.4CVSS7.8AI score0.05349EPSS
SaveExploits0References3
CERT
CERT
added 2006/09/27 12:00 a.m.37 views

Cisco IOS fails to properly verify the VTP configuration revision number

Overview Cisco IOS fails to properly verify the VTP configuration revision number. This vulnerability may allow a remote, unauthenticated attacker to prevent changes to the VLAN database from being properly propagated throughout the VTP domain. Description Cisco's VLAN Trunking Protocol VTP...

7.8CVSS6AI score0.05047EPSS
SaveExploits0References5
CERT
CERT
added 2006/09/14 12:00 a.m.37 views

Apple QuickTime fails to properly handle FLC movies

Overview Apple QuickTime fails to properly handle FLC movies. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Apple QuickTime is multimedia software that allows users to view local and remote audio, vide...

5.1CVSS7.9AI score0.16155EPSS
SaveExploits2References4
CERT
CERT
added 2006/08/24 12:00 a.m.37 views

VMware ESX Server management interface logs passwords in cleartext in a world-readable file

Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...

2.1CVSS6AI score0.00466EPSS
SaveExploits0References3
CERT
CERT
added 2006/08/16 12:00 a.m.37 views

X.Org server fails to properly test for effective user ID

Overview A vulnerability in the X.Org server could allow a local attacker to gain administrative privileges or cause a denial of service on an affected system. Description The X.Org server program provides several command-line options that are meant to be parsed only when the program is running a...

7.2CVSS6.9AI score0.01099EPSS
SaveExploits5References10
CERT
CERT
added 2006/08/08 12:00 a.m.37 views

Microsoft Internet Explorer fails to properly handle chained Cascading Style Sheets

Overview Microsoft Internet Explorer fails to properly handle chained Cascading Style Sheets CSS. This can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CSS is a mechanism for adding style to web documents. Microsoft Internet Explorer contains a vulnerabili...

7.5CVSS6.9AI score0.41215EPSS
SaveExploits0References4
CERT
CERT
added 2006/08/02 12:00 a.m.37 views

Apple Mac OS X WebKit may allow code execution when visiting a malicious website

Overview A vulnerability in Apple Mac OS X WebKit may allow an attacker to execute arbitrary code on an affected system. Description WebKit From the OpenDarwin WebKit project description, WebKit is an open source web browser engine. WebKit is also the name of the Mac OS X system framework version...

7.5CVSS6.8AI score0.04059EPSS
SaveExploits1References2
CERT
CERT
added 2006/08/02 12:00 a.m.37 views

Apple Mac OS X ImageIO vulnerable to integer overflow via specially crafted GIF image

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to process...

5.1CVSS7.7AI score0.02636EPSS
SaveExploits1References2
CERT
CERT
added 2006/07/27 12:00 a.m.37 views

Mozilla products fail to properly validate JavaScript constructors

Overview Mozilla products fail to properly validate references returned by JavaScript constructors. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Mozilla Foundation Security Advisory 2006-51: JavaScript functions have a...

7.5CVSS6.8AI score0.05459EPSS
SaveExploits0References5
CERT
CERT
added 2006/07/11 12:00 a.m.37 views

Microsoft Office fails to properly handle PNG images

Overview Microsoft Office applications fail to properly handle PNG images. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office applications fail to properly parse PNG images. When an Office document containing a malformed P...

9.3CVSS7.1AI score0.15226EPSS
SaveExploits0References1
CERT
CERT
added 2006/06/02 12:00 a.m.37 views

Mozilla may process content-defined setters on object prototypes with elevated privileges

Overview Mozilla allows content-defined setters on object prototypes to execute with elevated privileges. This may allow a remote attacker to execute arbitrary code. Description Setters A setter is a method in JavaScript that sets the value of a property. The problem The setters in Mozilla are...

7.5CVSS6.4AI score0.06243EPSS
SaveExploits0References4
CERT
CERT
added 2006/04/11 12:00 a.m.37 views

Microsoft Internet Explorer fails to handle specially crafted, invalid HTML

Overview Microsoft Internet Explorer IE fails to properly handle malformed HTML. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description IE fails to properly handle specially crafted HTML. When a specially crafted, malformed HTML file is opened...

7.5CVSS6.7AI score0.70001EPSS
SaveExploits1References1
CERT
CERT
added 2006/04/11 12:00 a.m.37 views

Microsoft Internet Explorer contains overflow in processing script action handlers

Overview A vulnerability in the Microsoft Internet Explorer web browser could allow a remote attacker to crash the browser or possibly execute arbitrary code on a vulnerable system. Description A programming error in the way that Internet Explorer handles multiple event handlers in an HTML elemen...

7.5CVSS7AI score0.61821EPSS
SaveExploits3References2
CERT
CERT
added 2006/03/16 12:00 a.m.37 views

Adobe Flash products contain multiple vulnerabilities

Overview Several vulnerabilities in Adobe Macromedia Flash products may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web...

5.1CVSS9.5AI score0.06602EPSS
SaveExploits0References6
CERT
CERT
added 2006/02/28 12:00 a.m.37 views

Adobe Macromedia Shockwave Player ActiveX installer buffer overflow vulnerability

Overview The ActiveX installer for Adobe Macromedia Shockwave contains a buffer overflow, which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Shockwave Player Adobe Macromedia Shockwave Player is software that plays active web content...

9.3CVSS7.4AI score0.19657EPSS
SaveExploits0References4
CERT
CERT
added 2005/12/31 12:00 a.m.37 views

Research in Motion (RIM) BlackBerry Handheld web browser does not properly handle Java Application Description (JAD) files

Overview The Research in Motion RIM BlackBerry Handheld web browser is vulnerable to a denial of service via a specially crafted Java Application Description JAD file. Description The BlackBerry Handheld web browser does not properly handle malformed JAD files. JAD files in J2ME are used to...

2.6CVSS6.8AI score0.02582EPSS
SaveExploits0References3
CERT
CERT
added 2005/09/09 12:00 a.m.37 views

mod_ssl fails to properly enforce client certificates authentication

Overview modssl, the Apache web server module for Secure Socket Layer SSL communications, may not properly authenticate client certificates. Description modssl provides Secure Socket Layer SSL communications for the Apache web server. SSL is designed to provide the ability to encrypt and...

10CVSS9.2AI score0.30576EPSS
SaveExploits0References10
CERT
CERT
added 2005/08/15 12:00 a.m.37 views

Novell eDirectory iMonitor vulnerable to buffer overflow

Overview Novell eDirectory iMonitor contains a buffer overflow that can be remotely exploited to allow execution of arbitrary code or crash an affected system. Description Novell eDirectory iMonitor is a service for monitoring servers in an eDirectory installation. A buffer overflow exists in...

7.5CVSS7.3AI score0.55424EPSS
SaveExploits8References5
CERT
CERT
added 2005/08/09 12:00 a.m.37 views

Microsoft Plug and Play contains a buffer overflow vulnerability

Overview Microsoft Plug and Play contains a flaw in the handling of message buffers that may result in local or remote arbitrary code execution or denial-of-service conditions. Description The following is from the Microsoft Plug and Play description: Plug and Play PnP allows the operating system...

10CVSS7.6AI score0.93014EPSS
SaveExploits12References14
CERT
CERT
added 2005/08/03 12:00 a.m.37 views

Computer Associates BrightStor ARCserve Backup Agents vulnerable to buffer overflow

Overview Several Computer Associates BrightStor ARCserve Backup Agents contain a buffer overflow, which may allow a remote attacker to execute arbitrary code. Description Computer Associates BrightStor ARCserve Backup is a cross-platform backup and recovery application. Backup Agents are availabl...

7.5CVSS7.7AI score0.66121EPSS
SaveExploits9References11
CERT
CERT
added 2005/08/02 12:00 a.m.37 views

Mozilla Firefox insecurely handles content from external applications

Overview Mozilla Firefox does not properly enforce domain restrictions on content sent by external applications, allowing a remote attacker to execute code on a vulnerable system. Description Mozilla Firefox can accept links from external applications, such as Flash and Quicktime. When such an...

7.5CVSS6.6AI score0.0449EPSS
SaveExploits0References5
CERT
CERT
added 2005/07/12 12:00 a.m.37 views

Microsoft Color Management Module buffer overflow during profile tag validation

Overview Microsoft Color Management Module contains a flaw that may allow an attacker to execute arbitrary code. Description The Microsoft Color Management Module provides consistent color management operations between applications and devices, and transforms between colorspaces such as 'RGB' and...

7.5CVSS6.8AI score0.49922EPSS
SaveExploits6References3
CERT
CERT
added 2005/05/19 12:00 a.m.37 views

Groove Mobile Workspace vulnerable to script injection via SharePoint lists containing picture columns

Overview A vulnerability in the way that Groove Mobile Workspace handles picture columns embedded within SharePoint lists may allow attackers to execute an arbitrary script. Description Groove Virtual Office provides a collaborative working environment that includes shared documents, databases,...

6.8CVSS6.6AI score0.03022EPSS
SaveExploits0References4
CERT
CERT
added 2005/05/18 12:00 a.m.37 views

TCP does not adequately validate segments before updating timestamp value

Overview Certain TCP implementations may allow a remote attacker to arbitrarily modify host timestamp values, leading to a denial-of-service condition. Description The Transmission Control Protocol TCP is defined in RFC 793 as a means to provide reliable host-to-host transmission between hosts in...

5CVSS6.3AI score0.82756EPSS
SaveExploits2References3
CERT
CERT
added 2005/04/19 12:00 a.m.37 views

Mozilla may execute JavaScript with elevated privileges when defined in site icon tag

Overview Mozilla may execute JavaScript contained within a site icon tag with elevated privileges. This may allow an attacker to execute arbitrary commands on a vulnerable system. Description XPCOMXPCOM is a cross-platform component object model similar to Microsoft COM or CORBA. XPCOM provides t...

7.5CVSS6.6AI score0.08283EPSS
SaveExploits1References10
CERT
CERT
added 2005/03/17 12:00 a.m.37 views

NotifyLink web client fails to adequately restrict access to administrative functions

Overview The NotifyLink web interface contains a vulnerability that allows authenticated normal users to access functions that have been disabled by an administrator. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...

4.6CVSS6.2AI score0.00658EPSS
SaveExploits0References3
CERT
CERT
added 2005/01/31 12:00 a.m.37 views

Apple Mac OS X vulnerable to information disclosure in "Message-ID" header

Overview The Mail application supplied with Apple's Mac OS X operating system identifies the system from which any electronic mail is sent. Description Mac OS X includes the Mail application for handling electronic mail. This application does include the Media Access Control MAC address of a...

5CVSS6.3AI score0.0271EPSS
SaveExploits0References2
CERT
CERT
added 2004/09/30 12:00 a.m.37 views

libXpm image library vulnerable to buffer overflow

Overview libXpm image parsing code contains a buffer overflow vulnerability that may allow an attacker to cause a denial-of-service condition or execute arbitrary code. Description X PixMap XPM is a format for encoding and decoding images on the X Windows System 11 X11. libXpm is a library of...

7.5CVSS8AI score0.08052EPSS
SaveExploits2References6
CERT
CERT
added 2004/09/10 12:00 a.m.37 views

Microsoft Internet Explorer window.createPopup() method creates chromeless windows

Overview The Internet Explorer IE window.createPopup method creates chromeless popup windows. These windows can be used to spoof the user interface in Internet Explorer, any Windows application, or the Windows desktop. Description The visible area of a web browser window can be categorized into t...

5CVSS6.2AI score0.50549EPSS
SaveExploits2References8
CERT
CERT
added 2004/08/17 12:00 a.m.37 views

CVS "history" command may disclose sensitive information

Overview A vulnerability exists in the history command of Concurrent Versions System CVS. If exploited, this vulnerability could disclose sensitive information about files and directories on an affected system to a remote, authenticated CVS user. Description Concurrent Versions System CVS is a...

5CVSS6.2AI score0.024EPSS
SaveExploits0References3
CERT
CERT
added 2004/03/30 12:00 a.m.37 views

Cisco 6000/6500/7600 series systems fail to properly process layer 2 frames

Overview Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 MSFC2 fail to properly process layer 2 frames. Description Cisco 6000/6500/7600 series systems with MSFC2 contain a vulnerability in the way layer 2 frames are processed in software. By sending a specially crafted...

4.7CVSS6.1AI score0.01101EPSS
SaveExploits1References9
Total number of security vulnerabilities3724