Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2011/02/03 12:00 a.m.37 views

Cisco Tandberg E, EX, and C Series default root credentials

Overview Cisco's Tandberg C series endpoints and E/EX personal video units that run software versions prior to TC4.0.0 have a root administrator account enabled by default with no password. Description Cisco Advisory cisco-sa-20110202-tandberg states:"This vulnerability affects Tandberg C Series...

10CVSS6.7AI score0.13988EPSS
SaveExploits4References3
CERT
CERT
added 2010/11/30 12:00 a.m.37 views

AWStats fails to properly handle "\\" when specifying a configuration file directory

Overview AWStats fails to properly handle "\" when specifying a configuration file directory. This could allow an attacker to specify an arbitrary configuration file located on an SMB share. Description From the AWStats project website: "AWStats is a free powerful and featureful tool that...

7.5CVSS6.5AI score0.27673EPSS
SaveExploits3References6
CERT
CERT
added 2009/06/09 12:00 a.m.37 views

Adobe Reader contains multiple vulnerabilities in the processing of JPX data

Overview Adobe Reader and Acrobat contain multiple vulnerabilities that may allow an attacker to execute arbitrary code. Description Adobe Acrobat Reader is software designed to view Portable Document Format PDF files. Adobe also distributes the Adobe Acrobat Plug-In to allow users to view PDF...

9.3CVSS7.9AI score0.08601EPSS
SaveExploits0References1
CERT
CERT
added 2008/10/07 12:00 a.m.37 views

Gear Software CD DVD Filter driver privilege escalation vulnerability

Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...

7.2CVSS6.9AI score0.00424EPSS
SaveExploits2References4
CERT
CERT
added 2008/03/19 12:00 a.m.37 views

X.Org PCF font parser buffer overflow

Overview A vulnerability in the X.Org server could allow a remote attacker to execute arbitrary code on an affected system. Description The X.Org project provides an open source implementation of the X Window System. The server supports bitmapped fonts in various formats, including Portable...

7.5CVSS8.8AI score0.05108EPSS
SaveExploits0References1
CERT
CERT
added 2008/03/06 12:00 a.m.37 views

Mozilla Thunderbird external-body MIME type buffer overflow

Overview Mozilla Thunderbird contains a heap-based buffer overflow which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Mozilla Thunderbird is an open source, cross-platform email and news client. Thunderbird uses Multipurpose Internet...

7.5CVSS7.1AI score0.06049EPSS
SaveExploits1References3
CERT
CERT
added 2008/02/05 12:00 a.m.37 views

Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control stack buffer overflow

Overview The Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes multip...

4.3CVSS7.1AI score0.08104EPSS
SaveExploits6References3
CERT
CERT
added 2007/12/12 12:00 a.m.37 views

Microsoft SMBv2 signing vulnerability

Overview A vulnerability in the way Microsoft Server Message Block Version 2 SMBv2 implements digital signing of packets may allow a remote, unauthenticated attacker to gain local user privileges and execute arbitrary code. Description Microsoft Server Message Block SMB Protocol is a network file...

10CVSS6.9AI score0.41243EPSS
SaveExploits1References2
CERT
CERT
added 2007/11/13 12:00 a.m.37 views

Apple QuickTime buffer overflow vulnerability

Overview Apple QuickTime contains a stack buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute code. Description Apple QuickTime is a media player that includes a browser plugin. QuickTime can display PICT images.From Apple Article ID: 306896 "About the...

9.3CVSS7.5AI score0.46662EPSS
SaveExploits0References2
CERT
CERT
added 2007/09/04 12:00 a.m.37 views

MIT Kerberos 5 kadmind privilege escalation vulnerability

Overview MIT Kerberos kadmind contains a privilege escalation vulnerability that may allow an authenticated attacker to execute code with root privileges. Description Kerberos is a network authentication system that uses a trusted third party to authenticate clients and servers to each other. It ...

8.5CVSS9.9AI score0.06139EPSS
SaveExploits1References2
CERT
CERT
added 2007/08/14 12:00 a.m.37 views

Motive Communications ActiveUtils EmailData ActiveX control stack buffer overflows

Overview The Motive Communications ActiveUtils EmailData ActiveX control contains multiple stack buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description Motive Communications ActiveUtils is a software package used by multiple ISPs to provide...

6.8CVSS7.2AI score0.05576EPSS
SaveExploits0References3
CERT
CERT
added 2007/07/10 12:00 a.m.37 views

SAP DB Web Server buffer overflow vulnerability

Overview The SAP Web Server contains a vulnerability that may allow an attacker to execute arbitrary code or cause a denial-of-service condition. Description SAP DB is a database server that includes a series of web-based configuration tools.A stack based buffer overlfow exists in the SAP DB web...

7.5CVSS7.3AI score0.70004EPSS
SaveExploits6References6
CERT
CERT
added 2007/06/14 12:00 a.m.37 views

Microsoft Windows Secure Channel integer underflow

Overview A vulnerability in Microsoft Windows Secure Channel security package may lead to execution of arbitrary code. Description Microsoft Windows Secure Channel Schannel security package implements standard network authentication protocols Secure Sockets Layer SSL and Transport Layer Security...

9.3CVSS6.1AI score0.12544EPSS
SaveExploits0References3
CERT
CERT
added 2007/06/12 12:00 a.m.37 views

Microsoft Speech API ActiveX controls contain buffer overflows

Overview The Microsoft Speech API ActiveListen and ActiveVoice ActiveX controls contain multiple buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Speech API is a software package that provides text-to-spee...

9.3CVSS7AI score0.54738EPSS
SaveExploits7References2
CERT
CERT
added 2007/06/06 12:00 a.m.38 views

Computer Associates Anti-Virus engine fails to properly handle malformed CAB archives

Overview The Computer Associates Anti-Virus engine contains a stack-based buffer overflow that may allow a remote, unauthenticated attacker to execute arbitrary code. Description The Computer Associates Anti-Virus engine contains a stack-based buffer overflow in the code responsible for processin...

9.3CVSS7.3AI score0.49647EPSS
SaveExploits7References3
CERT
CERT
added 2007/05/25 12:00 a.m.37 views

Apple Mac OS X iChat UPnP buffer overflow

Overview A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service. Description Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle...

10CVSS7.9AI score0.09454EPSS
SaveExploits1References1
CERT
CERT
added 2007/05/16 12:00 a.m.37 views

libpng denial of service vulnerability

Overview The libpng library contains a denial-of-service vulnerability. Description The libpng library can be used to allow other applications to render PNG images.The libpng library contains a denial-of-service vulnerability. From the Libpng-1.2.16-ADVISORY: This vulnerability could be used to...

5CVSS9AI score0.05115EPSS
SaveExploits1References5
CERT
CERT
added 2007/05/08 12:00 a.m.37 views

Microsoft Exchange Outlook Web Access UTF character set label script injection vulnerability

Overview Microsoft Exchange Outlook Web Access OWA fails to properly handle the UTF character set label, which can allow a remote, unauthenticated attacker to execute script within the security context of the OWA user. Description OWA allows users to access their email accounts on a Microsoft...

6.8CVSS6.2AI score0.33148EPSS
SaveExploits0References2
CERT
CERT
added 2007/03/05 12:00 a.m.37 views

WordPress fails to properly sanitize input passed to the iz parameter in wp-includes/theme.php

Overview WordPress fails to properly sanitize input to the iz parameter in wp-includes/theme.php, which could allow a remote, unauthenticated attacker to execute arbitrary commands. Description WordPress is a blogging application that is written in PHP. WordPress 2.1.1 fails to properly sanitize...

7.5CVSS6.6AI score0.27006EPSS
SaveExploits4References4
CERT
CERT
added 2007/02/15 12:00 a.m.37 views

Microsoft Word fails to properly handle malformed strings

Overview A vulnerability in the way Microsoft Word handles malformed Word Document streams could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Word contains a memory corruption vulnerability that could be triggered when Word opens...

7.6CVSS6.9AI score0.2052EPSS
SaveExploits0References9
CERT
CERT
added 2007/02/14 12:00 a.m.37 views

Microsoft Windows fails to properly handle malformed OLE objects embedded in RTF documents

Overview A vulnerability in the way that Microsoft Windows handles OLE objects embedded within RTF documents may allow an attacker to execute arbitrary code. Description Microsoft Object Linking and Embedding OLE is a technology that allows applications to create and edit compound documents...

7.6CVSS6.8AI score0.24644EPSS
SaveExploits0References4
CERT
CERT
added 2007/02/13 12:00 a.m.37 views

Microsoft Internet Explorer fails to properly instantiate COM objects

Overview A vulnerability in the way Microsoft Internet Explorer instantiates COM objects may lead to execution of arbitrary code. Description Component Object Model, or COM objects are used to enable interprocess communication and dynamic object creation within Microsoft Windows. Microsoft Intern...

9.3CVSS7AI score0.31122EPSS
SaveExploits0References3
CERT
CERT
added 2007/01/12 12:00 a.m.37 views

CA BrightStor ARCserve Backup Message Engine RPC buffer overflow

Overview The Computer Associates BrightStor ARCserve Backup Message Engine contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that...

7.5CVSS7.4AI score0.70037EPSS
SaveExploits16References6
CERT
CERT
added 2007/01/09 12:00 a.m.37 views

Microsoft Excel vulnerable to arbitrary code execution via malformed record

Overview A vulnerability in Microsoft Excel may allow an attacker to execute arbitrary code on a vulnerable system. Description A vulnerability exists in the way Microsoft Excel handles malformed records.Per Microsoft Security Bulletin MS07-002: A remote code execution vulnerability exists in...

9.3CVSS7.3AI score0.3319EPSS
SaveExploits0References6
CERT
CERT
added 2007/01/09 12:00 a.m.37 views

Kerberos administration daemon may free uninitialized pointers

Overview A vulnerability exists in the Kerberos administration daemon that may allow a remote, unauthenticated user to free uninitialized pointers. Freeing uninitialized pointers corrupts memory in a way that could allow an attacker to execute code. Description The MIT krb 5 administration daemon...

5CVSS9.6AI score0.05381EPSS
SaveExploits0References10
CERT
CERT
added 2006/12/20 12:00 a.m.37 views

Mozilla mail products vulnerable to heap buffer overflow via Content-Type headers

Overview Mozilla mail products contain a heap buffer overflow vulnerability in the way they process Content-Type headers. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Mozilla Thunderbird and SeaMonkey contain a buffer overflow...

6.8CVSS7.4AI score0.04239EPSS
SaveExploits0References6
CERT
CERT
added 2006/11/29 12:00 a.m.37 views

Apple Mac OS X WebKit deallocated object access vulnerability

Overview Apple Safari WebKit fails to properly deallocate objects. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description According to Apple: WebKit is the open source core of Apple's Safari web browser. It is available as a framework in Mac OS X fo...

6.8CVSS7.1AI score0.05406EPSS
SaveExploits2References3
CERT
CERT
added 2006/11/08 12:00 a.m.37 views

Mozilla XML.prototype.hasOwnProperty() method memory corruption vulnerability

Overview Mozilla products fail to properly handle the XML.prototype.hasOwnProperty method. This vulnerability may allow a remote attacker execute arbitrary code. Description The ECMAScript for XML E4X Specification defines the XML.prototype.hasOwnProperty as a JavaScript method used to determine ...

7.5CVSS6.9AI score0.05675EPSS
SaveExploits0References16
CERT
CERT
added 2006/11/06 12:00 a.m.37 views

The Red Hat Enterprise Linux 3 SMP Kernel fails to properly handle IPC shared-memory

Overview The Red Hat Enterprise Linux 3 SMP Kernel may allow an authenticated attacker to cause a denial-of-service condition with specially crafted IPC shared-memory functions. Description Inter-Process Communication IPC shared-memory is a method of passing data between programs used by the Red...

5.5CVSS6.2AI score0.00389EPSS
SaveExploits1References3
CERT
CERT
added 2006/10/25 12:00 a.m.37 views

Wireshark contains multiple off-by-one errors in the IPSec ESP preference parser

Overview Wireshark contains a vulnerability in the IPSec ESP preference parser that may cause a denial of service condition. Description Wireshark contains multiple off-by-one vulnerabilities in the IPSec ESP preference parser when the application has been compiled with ESP decryption support.Thi...

5CVSS8AI score0.04389EPSS
SaveExploits0References10
CERT
CERT
added 2006/10/24 12:00 a.m.37 views

Oracle DISABLE_HIERARCHY_INTERNAL procedure vulnerable to PL/SQL injection

Overview The Oracle DISABLEHIERARCHYINTERNAL procedure is vulnerable to PL/SQL injection. This vulnerability may allow a remote, authenticated attacker to execute arbitrary PL/SQL commands on a vulnerable Oracle installation. Description The Oracle DISABLEHIERARCHYINTERNAL procedure fails to...

9CVSS7.1AI score0.03405EPSS
SaveExploits0References3
CERT
CERT
added 2006/10/12 12:00 a.m.37 views

Microsoft Word vulnerable to remote code execution

Overview A remote code execution vulnerability in Microsoft Word can allow a remote attacker to execute arbitrary code via a specially crafted mail merge file. Description Microsoft Word contains a remote code execution vulnerability that can be exploited when a specially crafted mail merge file ...

9.3CVSS7.2AI score0.30926EPSS
SaveExploits0References1
CERT
CERT
added 2006/10/11 12:00 a.m.37 views

Microsoft Server Service fails to properly handle network messages

Overview A vulnerability in the way Microsoft Server Service handles network messages may lead to execution of arbitrary code. Description Microsoft Server Service provides support for Remote Proceedure Call RPC, resource sharing, and named pipe communication over the network. Microsoft Server...

9CVSS7.3AI score0.43485EPSS
SaveExploits0References1
CERT
CERT
added 2006/09/29 12:00 a.m.37 views

FileCOPA FTP server vulnerable to buffer overflow

Overview There is a buffer overflow vulnerability in the FileCOPA FTP server which may allow an attacker to execute arbitrary code. Description FileCOPA is an FTP server for Microsoft Windows that supports anonymous file transfers.There is a buffer overflow vulnerability in the FileCOPA FTP servi...

6.4CVSS7.8AI score0.05349EPSS
SaveExploits0References3
CERT
CERT
added 2006/09/27 12:00 a.m.37 views

Cisco IOS fails to properly verify the VTP configuration revision number

Overview Cisco IOS fails to properly verify the VTP configuration revision number. This vulnerability may allow a remote, unauthenticated attacker to prevent changes to the VLAN database from being properly propagated throughout the VTP domain. Description Cisco's VLAN Trunking Protocol VTP...

7.8CVSS6AI score0.05047EPSS
SaveExploits0References5
CERT
CERT
added 2006/09/14 12:00 a.m.37 views

Apple QuickTime fails to properly handle FLC movies

Overview Apple QuickTime fails to properly handle FLC movies. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Apple QuickTime is multimedia software that allows users to view local and remote audio, vide...

5.1CVSS7.9AI score0.16155EPSS
SaveExploits2References4
CERT
CERT
added 2006/08/24 12:00 a.m.37 views

VMware ESX Server management interface logs passwords in cleartext in a world-readable file

Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...

2.1CVSS6AI score0.00466EPSS
SaveExploits0References3
CERT
CERT
added 2006/08/16 12:00 a.m.37 views

X.Org server fails to properly test for effective user ID

Overview A vulnerability in the X.Org server could allow a local attacker to gain administrative privileges or cause a denial of service on an affected system. Description The X.Org server program provides several command-line options that are meant to be parsed only when the program is running a...

7.2CVSS6.9AI score0.01099EPSS
SaveExploits5References10
CERT
CERT
added 2006/08/08 12:00 a.m.37 views

Microsoft Internet Explorer fails to properly handle chained Cascading Style Sheets

Overview Microsoft Internet Explorer fails to properly handle chained Cascading Style Sheets CSS. This can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CSS is a mechanism for adding style to web documents. Microsoft Internet Explorer contains a vulnerabili...

7.5CVSS6.9AI score0.41215EPSS
SaveExploits0References4
CERT
CERT
added 2006/08/02 12:00 a.m.37 views

Apple Mac OS X WebKit may allow code execution when visiting a malicious website

Overview A vulnerability in Apple Mac OS X WebKit may allow an attacker to execute arbitrary code on an affected system. Description WebKit From the OpenDarwin WebKit project description, WebKit is an open source web browser engine. WebKit is also the name of the Mac OS X system framework version...

7.5CVSS6.8AI score0.04059EPSS
SaveExploits1References2
CERT
CERT
added 2006/08/02 12:00 a.m.37 views

Apple Mac OS X ImageIO vulnerable to integer overflow via specially crafted GIF image

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to process...

5.1CVSS7.7AI score0.02636EPSS
SaveExploits1References2
CERT
CERT
added 2006/07/11 12:00 a.m.37 views

Microsoft Office fails to properly handle PNG images

Overview Microsoft Office applications fail to properly handle PNG images. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office applications fail to properly parse PNG images. When an Office document containing a malformed P...

9.3CVSS7.1AI score0.15226EPSS
SaveExploits0References1
CERT
CERT
added 2006/06/02 12:00 a.m.37 views

Mozilla may process content-defined setters on object prototypes with elevated privileges

Overview Mozilla allows content-defined setters on object prototypes to execute with elevated privileges. This may allow a remote attacker to execute arbitrary code. Description Setters A setter is a method in JavaScript that sets the value of a property. The problem The setters in Mozilla are...

7.5CVSS6.4AI score0.06243EPSS
SaveExploits0References4
CERT
CERT
added 2006/04/11 12:00 a.m.37 views

Microsoft Internet Explorer fails to handle specially crafted, invalid HTML

Overview Microsoft Internet Explorer IE fails to properly handle malformed HTML. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description IE fails to properly handle specially crafted HTML. When a specially crafted, malformed HTML file is opened...

7.5CVSS6.7AI score0.70001EPSS
SaveExploits1References1
CERT
CERT
added 2006/04/11 12:00 a.m.37 views

Microsoft Internet Explorer contains overflow in processing script action handlers

Overview A vulnerability in the Microsoft Internet Explorer web browser could allow a remote attacker to crash the browser or possibly execute arbitrary code on a vulnerable system. Description A programming error in the way that Internet Explorer handles multiple event handlers in an HTML elemen...

7.5CVSS7AI score0.61821EPSS
SaveExploits3References2
CERT
CERT
added 2006/03/16 12:00 a.m.37 views

Adobe Flash products contain multiple vulnerabilities

Overview Several vulnerabilities in Adobe Macromedia Flash products may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web...

5.1CVSS9.5AI score0.06602EPSS
SaveExploits0References6
CERT
CERT
added 2006/02/28 12:00 a.m.37 views

Adobe Macromedia Shockwave Player ActiveX installer buffer overflow vulnerability

Overview The ActiveX installer for Adobe Macromedia Shockwave contains a buffer overflow, which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Shockwave Player Adobe Macromedia Shockwave Player is software that plays active web content...

9.3CVSS7.4AI score0.19657EPSS
SaveExploits0References4
CERT
CERT
added 2005/12/31 12:00 a.m.37 views

Research in Motion (RIM) BlackBerry Handheld web browser does not properly handle Java Application Description (JAD) files

Overview The Research in Motion RIM BlackBerry Handheld web browser is vulnerable to a denial of service via a specially crafted Java Application Description JAD file. Description The BlackBerry Handheld web browser does not properly handle malformed JAD files. JAD files in J2ME are used to...

2.6CVSS6.8AI score0.02582EPSS
SaveExploits0References3
CERT
CERT
added 2005/09/09 12:00 a.m.37 views

mod_ssl fails to properly enforce client certificates authentication

Overview modssl, the Apache web server module for Secure Socket Layer SSL communications, may not properly authenticate client certificates. Description modssl provides Secure Socket Layer SSL communications for the Apache web server. SSL is designed to provide the ability to encrypt and...

10CVSS9.2AI score0.30576EPSS
SaveExploits0References10
CERT
CERT
added 2005/08/15 12:00 a.m.37 views

Novell eDirectory iMonitor vulnerable to buffer overflow

Overview Novell eDirectory iMonitor contains a buffer overflow that can be remotely exploited to allow execution of arbitrary code or crash an affected system. Description Novell eDirectory iMonitor is a service for monitoring servers in an eDirectory installation. A buffer overflow exists in...

7.5CVSS7.3AI score0.55424EPSS
SaveExploits8References5
Total number of security vulnerabilities3724