Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2007/02/20 12:00 a.m.29 views

Microsoft Malware Protection Engine fails to properly process a specially crafted PDF File

Overview A vulnerability in the way Microsoft Malware Protection Engine processes PDF files may lead to execution of arbitrary code. Description Microsoft Malware Protection Engine contains a vulnerability that could be exploited when it attempts to process specially crafted PDF files. According ...

9.3CVSS7.3AI score0.3008EPSS
SaveExploits0References4
CERT
CERT
added 2007/02/15 12:00 a.m.29 views

McAfee Virex fails to properly authenticate the source of updates

Overview McAfee Virex automatic updates may not properly authenticate the source of updates. This may allow a remote attacker to execute arbitrary commands on a vulnerable system. Description McAfee Virex is anti-virus software for the Mac OS X platform. McAfee Virex 7 for Mac OS X connects to a...

7.5AI score
SaveExploits0References1
CERT
CERT
added 2007/02/08 12:00 a.m.29 views

TWiki vulnerable to arbitrary code execution via CGI session files

Overview TWiki fails to protect the CGI session directory, which may allow an attacker to execute arbitrary code with the privileges of the web server. Description TWiki is a web-based collaborative publishing environment. TWiki creates CGI session files in the global /tmp directory, which is...

4.6CVSS7AI score0.00375EPSS
SaveExploits0References2
CERT
CERT
added 2007/01/24 12:00 a.m.29 views

Online Media Technologies NCTsoft NCTAudioFile2 ActiveX buffer overflow

Overview The Online Media Technologies NCTsoft NCTAudioFile2 ActiveX control contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Online Media Technologies NCTsoft provides an ActiveX control...

9.3CVSS7.2AI score0.36473EPSS
SaveExploits6References26
CERT
CERT
added 2007/01/17 12:00 a.m.29 views

Novell NetMail IMAP vulnerable to DoS when processing "APPEND" commands

Overview A vulnerability in the way Novell Netmail handles IMAP APPEND commands may allow a denial of service. Description Novell Netmail's IMAP server contains a buffer overflow that may occur when processing parameters supplied to the APPEND command. An attacker must login to an affected system...

4CVSS6.8AI score0.01729EPSS
SaveExploits0References3
CERT
CERT
added 2006/12/13 12:00 a.m.29 views

Microsoft Internet Explorer Script Error Handling Memory Corruption Vulnerability

Overview A vulnerability in the way Microsoft Internet Explorer handles certain script errors may lead to memory corruption that may allow remote execution of arbitrary code. Description Microsoft Internet Explorer contains a memory corruption vulnerability that could be exploited when handling...

9.3CVSS6.8AI score0.31068EPSS
SaveExploits1References1
CERT
CERT
added 2006/12/07 12:00 a.m.29 views

Adobe Download Manager buffer overflow

Overview Adobe Download Manager contains a buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to run arbitrary code with the privileges of the affected user or cause a denial-of-service condition. Description Adobe Download Manager ADM ADM is a utility that Adobe...

6.8CVSS7.1AI score0.14329EPSS
SaveExploits0References4
CERT
CERT
added 2006/11/30 12:00 a.m.29 views

Apple Mac OS X Apple Type Services server contains multiple buffer overflows

Overview The Apple Mac OS X Apple Type Services server contains multiple buffer overflow vulnerabilities. These vulnerabilities may allow a local attacker to execute arbitrary code with system privileges. Description The Apple Mac OS X Apple Type Services server fails to properly validate service...

7.2CVSS7.3AI score0.01011EPSS
SaveExploits2References2
CERT
CERT
added 2006/11/14 12:00 a.m.29 views

Microsoft Agent fails to properly handle specially crafted .ACF files

Overview Microsoft Agent fails to properly handle specially crafted .ACF files and may allow a remote attacker to execute arbitrary code. Description Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easie...

7.5CVSS6.7AI score0.40974EPSS
SaveExploits0References3
CERT
CERT
added 2006/11/07 12:00 a.m.29 views

Apache mod_tcl module contains a format string error

Overview A format string vulnerability exists in the modtcl Apache module. This vulnerability may allow a remote attacker to execute arbitrary code. Description The Apache HTTP Server, also known as httpd, is an open-source HTTP server that runs on Microsoft Windows, Linux, Unix, and Apple OS X...

6.8CVSS6.8AI score0.15972EPSS
SaveExploits0References5
CERT
CERT
added 2006/10/09 12:00 a.m.29 views

AOL YGP Pic Downloader Plugin ActiveX control buffer overflow

Overview The AOL YGP Pic Downloader ActiveX control contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The AOL YGP You've Got Pictures Pic Downloader ActiveX control is a component that comes...

7.5CVSS7.3AI score0.05857EPSS
SaveExploits0References6
CERT
CERT
added 2006/08/02 12:00 a.m.29 views

Apple Mac OS X ImageIO contains undetected memory failure in GIF image handling

Overview The Apple Mac OS X ImageIO framework contains a memory allocation flaw that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to...

5.1CVSS7.1AI score0.02636EPSS
SaveExploits1References2
CERT
CERT
added 2006/07/31 12:00 a.m.29 views

Mozilla Firefox may allow chrome URLs to reference remote files

Overview Mozilla products allow chrome URLs to reference remote files. This allows a remote attacker to execute code. Description Chrome The Mozilla user interface components outside of the content area are created using chrome. This includes toolbars, menu bars, progress bars, and window title...

2.6CVSS6AI score0.03093EPSS
SaveExploits0References8
CERT
CERT
added 2006/06/13 12:00 a.m.29 views

Microsoft Windows Media Player PNG processing buffer overflow

Overview Microsoft Windows Media Player contains a stack-based buffer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Windows Media Player Windows Media Player is a multimedia application that comes with...

9.3CVSS7.2AI score0.48723EPSS
SaveExploits5References1
CERT
CERT
added 2006/05/30 12:00 a.m.29 views

Secure Elements Class 5 AVR server fails to validate source address of messages

Overview The Secure Elements Class 5 AVR server fails to validate the source address of messages it receives. This may allow an attacker to forge messages to the server. Description Class 5 AVR Secure Elements Class 5 AVR Automated Vulnerability Remediation is a security product that monitors and...

7AI score
SaveExploits0References1
CERT
CERT
added 2006/04/28 12:00 a.m.29 views

Winny contains a buffer overflow

Overview Winny contains a buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Winny also referred to as WinNY is a popular Japanese peer-to-peer file sharing application. A flaw exists in this program due t...

7.5CVSS7.8AI score0.0469EPSS
SaveExploits0References4
CERT
CERT
added 2006/04/11 12:00 a.m.29 views

Microsoft Internet Explorer fails to properly handle HTML elements with a specially crafted tag

Overview Microsoft Internet Explorer IE fails to properly handle HTML element tags, which may allow a remote, unauthenticated attacker to execute arbitrary code. Description IE fails to properly handle HTML element tags. When a specially crafted HTML file is opened in IE, system memory can be...

7.5CVSS6.5AI score0.57234EPSS
SaveExploits1References1
CERT
CERT
added 2006/04/05 12:00 a.m.29 views

RealNetworks products fail to properly handle chunked data

Overview Numerous RealNetworks products do not properly handle chunked data. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer RealNetworks RealPlayer is a multimedia application that allows users to view local and...

9.3CVSS7.2AI score0.05783EPSS
SaveExploits5References5
CERT
CERT
added 2006/02/13 12:00 a.m.29 views

Multiple vendor SFTP logging format string vulnerability

Overview A logging function used by multiple vendors' SFTP servers contains a format string vulnerability, which may allow an authorized remote attacker to execute arbitrary code or cause a denial of service. Description SFTP SFTP Secure FTP is a file transfer application that uses SSH for...

8AI score
SaveExploits0References1
CERT
CERT
added 2006/02/09 12:00 a.m.29 views

Microsoft WMF memory corruption vulnerability

Overview Microsoft applications fail to properly handle Windows Metafile WMF images potentially allowing a remote attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Windows Graphics Rendering Engine supports a number of image formats including WMF images. Windows...

9.3CVSS7.1AI score0.19057EPSS
SaveExploits1References5
CERT
CERT
added 2005/09/22 12:00 a.m.29 views

VERITAS Storage Exec DCOM servers contain multiple buffer overflows

Overview VERITAS Storage Exec contains several buffer overflows, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description VERITAS Storage Exec is software package that performs storage management. Multiple DCOM server components provided by Storage Exec...

8AI score
SaveExploits0References4
CERT
CERT
added 2005/09/21 12:00 a.m.29 views

unace buffer overflow vulnerability

Overview A buffer overflow in the unace compression library may allow a remote attacker to execute arbitrary code. Description The unace compression library is used to decompress ace archives .ace file extension. A lack of input validation on filenames in an ace archive may allow a buffer overflo...

5.1CVSS7.3AI score0.03243EPSS
SaveExploits0References6
CERT
CERT
added 2005/07/07 12:00 a.m.29 views

AIX FTP server may not properly timeout ephemeral data ports

Overview The IBM AIX FTP server may be vulnerable to a denial-of-service condition when passive data ports are not closed properly. Description IBM AIX includes an FTP server, ftpd, which allows files to be transferred between hosts with the FTP protocol. This server is vulnerable to a condition...

6.6AI score
SaveExploits0References3
CERT
CERT
added 2005/06/24 12:00 a.m.29 views

VERITAS Backup Exec Remote Agent fails to properly validate authentication requests

Overview Backup Exec Remote Agent for Windows Servers contains a buffer overflow vulnerability due to incorrect validation on authentication requests. Description VERITAS Backup Exec is a data backup and recovery solution with support for over the network backup. The VERITAS Backup Exec Agent run...

7.5CVSS8AI score0.86365EPSS
SaveExploits9References5
CERT
CERT
added 2005/06/08 12:00 a.m.29 views

Apple Mac OSX executes arbitrary widget with same "bundle identifier" as system widget

Overview Apple Mac OS X Tiger Dashboard executes arbitrary widgets with the same "bundle identifier" as a system widget. This can allow a user-installed widget to override a system-installed one. Description DashboardDashboard is a new feature introduced in Apple Mac OS X Tiger 10.4. Dashboard is...

7.5CVSS6.8AI score0.01832EPSS
SaveExploits1References6
CERT
CERT
added 2005/05/10 12:00 a.m.29 views

Microsoft Windows Explorer vulnerable to script injection via the Web View DLL

Overview Windows Explorer is vulnerable to script injection via the Web View DLL. Exploitation of this vulnerability may lead to execution of arbitrary code. Description Windows Explorer uses the Web View DLL webvw.dll to display information about a selected file/folder file size, author, version...

5CVSS7.2AI score0.17108EPSS
SaveExploits2References4
CERT
CERT
added 2005/04/12 12:00 a.m.29 views

Microsoft MSN Messenger GIF processing buffer overflow

Overview MSN Messenger clients before version 7.0 will allow remote attackers to take control of a computer if malicious GIF files are processed. Description Microsoft MSN Messenger is an instant messaging application that allows users to collaborate with people using text messages, voice and vid...

7.5CVSS8.1AI score0.23171EPSS
SaveExploits0References6
CERT
CERT
added 2005/03/18 12:00 a.m.29 views

McAfee Scan Engine vulnerable to buffer overflow in LHA decoder

Overview A buffer overflow vulnerability in the McAfee Virus Scan Engine may allow a remote attacker to execute arbitrary code on an affected system. Because the vulnerability exists in a core component, a number of different McAfee products are affected. Description The McAfee Antivirus products...

7.5CVSS7.6AI score0.07125EPSS
SaveExploits1References4
CERT
CERT
added 2005/02/21 12:00 a.m.29 views

WinAmp playlist handling may allow a remote buffer overflow and arbitrary code execution

Overview WinAmp contains a flaw which may allow a remote system compromise if a maliciously crafted playlist is loaded. Description Nullsoft's WinAmp is a multimedia system for Microsoft Windows. WinAmp allows users to create and use "playlists" to play their multimedia files in a customized...

10CVSS7.4AI score0.17257EPSS
SaveExploits2References7
CERT
CERT
added 2005/01/20 12:00 a.m.29 views

Microsoft Windows Indexing Service fails to properly handle query validation

Overview A vulnerability in the Microsoft Indexing Service could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Indexing Service provides applications and scripts with a means of managing, querying, and indexing information in file systems or web...

10CVSS7.9AI score0.42824EPSS
SaveExploits0References1
CERT
CERT
added 2004/12/01 12:00 a.m.29 views

Sun Java System Web Proxy Server vulnerable to buffer overflow

Overview Buffer overflow vulnerabilities in the Java System Web Proxy Server may allow remote attackers to execute arbitrary code or cause a denial-of-service condition. Description The Java System Web Proxy Server is a caching HTTP proxy server. A lack of bounds checking in the Java System Web...

8.5AI score
SaveExploits0References4
CERT
CERT
added 2004/11/10 12:00 a.m.29 views

Cisco IOS fails to properly handle malformed DHCP packets

Overview A denial-of-service vulnerability exists in Cisco's Internetwork Operating System IOS. This vulnerability may allow remote attackers to conduct denial-of-service attacks on an affected device. Description The Dynamic Host Configuration Protocol DHCP provides a means for distributing...

7.1AI score
SaveExploits0References2
CERT
CERT
added 2004/10/13 12:00 a.m.29 views

Microsoft Windows SMTP component vulnerable to remote code execution

Overview A vulnerability in the mail handling service in some versions of Microsoft Windows could allow a remote attacker to compromise the affected system. Description The Simple Mail Transfer Protocol SMTP is the most common protocol for the delivery of electronic mail between systems on the...

10CVSS7AI score0.30291EPSS
SaveExploits0References2
CERT
CERT
added 2004/08/10 12:00 a.m.29 views

AOL Instant Messenger vulnerable to buffer overflow

Overview A vulnerability in the AOL Instant Messenger AIM client could allow a remote attacker to execute arbitrary code on a victim system. Description AOL Instant Messenger AIM is an instant messaging system distributed by AOL Time Warner. A buffer overflow error exists in the way that some...

10CVSS7.4AI score0.66019EPSS
SaveExploits14References3
CERT
CERT
added 2004/07/12 12:00 a.m.29 views

MySQL fails to properly handle overly long "scramble" values

Overview There is a buffer overflow vulnerability in the way MySQL handles overly long "scramble" strings, which could allow an attacker to cause a denial of service or potentially execute arbitrary code. Description MySQL is an open-source database system available for Microsoft Windows, Linux,...

10CVSS7.5AI score0.07816EPSS
SaveExploits0References4
CERT
CERT
added 2004/05/13 12:00 a.m.29 views

Multiple Symantec firewall products contain a heap corruption vulnerability in the handling of NBNS response packets

Overview There is a heap corruption vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted NetBIOS Name Service NBNS response packet could allow an unauthenticated, remote attacker to execute arbitrary code with kernel privileges. Description Symante...

10CVSS7.8AI score0.12798EPSS
SaveExploits0References3
CERT
CERT
added 2004/05/10 12:00 a.m.29 views

Gaim contains an integer overflow vulnerability when parsing DirectIM packets

Overview There is an integer overflow vulnerability in the handlehdrodc function, which could allow an unauthenticated, remote attacker to cause a denial of service or potentially execute arbitrary code. Description Gaim is a multi-protocol instant messenger client available for a number of...

7.5CVSS9.8AI score0.08497EPSS
SaveExploits0References4
CERT
CERT
added 2004/05/06 12:00 a.m.29 views

Gaim contains a buffer overflow vulnerability in the gaim_url_parse() function

Overview There is a buffer overflow vulnerability in the Gaim gaimurlparse function, which could allow an unauthenticated, remote attacker to execute arbitrary code. Description Gaim is a multi-protocol instant messenger available for a number of operating systems. There is a buffer overflow...

7.5CVSS9.8AI score0.07605EPSS
SaveExploits0References4
CERT
CERT
added 2004/04/14 12:00 a.m.29 views

Microsoft Windows XP creates tasks with elevated privileges

Overview Microsoft Windows XP contains a vulnerability in the way that tasks are created that may permit an authenticated user to launch applications with elevated privileges. Description Microsoft Windows creates tasks when a user launches an application. A vulnerability in the way that Windows ...

7.2CVSS7.2AI score0.20854EPSS
SaveExploits0References1
CERT
CERT
added 2004/03/10 12:00 a.m.29 views

Microsoft Windows Media Services fails to properly validate TCP requests

Overview Microsoft Windows Media Services fails to properly validate TCP requests which could allow a remote, unauthenticated attacker to cause the services to refuse new TCP connections. Description Microsoft Windows Media Services is an optional component that provides the ability to deliver...

5CVSS6.3AI score0.25824EPSS
SaveExploits0References3
CERT
CERT
added 2004/02/25 12:00 a.m.30 views

Apple Quicktime/Darwin Streaming Server fails to properly parse DESCRIBE requests

Overview Apple Quicktime/Darwin Streaming Server fails to properly parse DESCRIBE requests containing overly large User-Agent fields. This could allow an unauthenticated, remote attacker to cause a denial-of-service condition. Description Apple's QuickTime and Darwin Streaming Server is software...

5CVSS6AI score0.03474EPSS
SaveExploits0References3
CERT
CERT
added 2004/02/25 12:00 a.m.29 views

Apple Mac OS X Safari fails to properly display URLs in the status bar

Overview Apple Mac OS X Safari fails to properly display URLs in the status bar. Description Safari is a web browser for the Macintosh platform. There is an unspecified vulnerability in the way Safari displays URLs in the status bar. --- Impact The complete impact of this vulnerability is not yet...

5CVSS5.9AI score0.02068EPSS
SaveExploits0References2
CERT
CERT
added 2004/01/16 12:00 a.m.29 views

tcpdump contains vulnerability in ISAKMP decoding routine

Overview tcpdump contains a vulnerability in the way it decodes Internet Security Association and Key Management Protocol ISAKMP packets. Description tcpdump is a widely-used network sniffer that is capable of decoding ISAKMP packets. A vulnerability exists in the way tcpdump parses specially...

7.5CVSS7AI score0.05257EPSS
SaveExploits0References6
CERT
CERT
added 2003/11/04 12:00 a.m.29 views

Multiple vulnerabilities in X.400 implementations

Overview Multiple vulnerabilities exist in different vendors' X.400 implementations. The impacts of these vulnerabilities are varied and range from denial of service to potential remote execution of arbitrary code. Description The U.K. National Infrastructure Security Co-ordination Center NISCC h...

5CVSS7AI score0.0319EPSS
SaveExploits0References3
CERT
CERT
added 2003/10/30 12:00 a.m.29 views

Avaya Argent Office requests 'HoldMusic' file from broadcast address via TFTP

Overview This vulnerability allows unauthenticated users to upload call holding music to affected devices. Description The Avaya Argent Office sends broadcast TFTP requests to obtain a file named "HoldMusic" that is used to supply hold music for customers who dial into the device. Therefore, an...

6.8AI score
SaveExploits0References1
CERT
CERT
added 2003/09/30 12:00 a.m.29 views

OpenSSL accepts unsolicited client certificate messages

Overview OpenSSL accepts unsolicited client certificate messages. This could allow an attacker to exploit underlying vulnerabilities in client certificate handling. Description OpenSSL implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols and includes a general-purpos...

7.6AI score
SaveExploits0References3
CERT
CERT
added 2003/09/22 12:00 a.m.29 views

WS_FTP Server vulnerable to buffer overflow when supplied overly long "STAT" command

Overview It has been reported that a vulnerability exists in the processing of a "STAT" command on WSFTP Servers versions 4.x and prior. Exploitation of this vulnerability may lead to an authenticated user executing arbitrary code with the elevated privileges of the server process. Description...

8AI score
SaveExploits0References2
CERT
CERT
added 2003/08/19 12:00 a.m.29 views

Sun ONE/iPlanet Web Server vulnerable to DoS

Overview A vulnerability in the SunOne/iPlanet Web Server may allow a remote attacker to cause a denial of service. Description The SunOne/iPlanet Web Server contains a vulnerability which may allow a remote attacker to disrupt the normal operation of the web server. This vulnerability is only...

7.1AI score
SaveExploits0References3
CERT
CERT
added 2003/07/23 12:00 a.m.29 views

Solaris systems may crash in response to certain IPv6 packets

Overview Solaris 8 systems that accept IPv6 traffic may be subject to denial of service attacks from arbitrary remote attackers. Description Sun Microsystems has reported that systems running Solaris 8 may encounter a system panic in response to IPv6 packets with certain characteristics. Sun Aler...

7AI score
SaveExploits0References3
CERT
CERT
added 2003/04/17 12:00 a.m.29 views

RealNetworks Helix Universal Server vulnerable to buffer overflow when supplied an overly long string within the "Transport" field of a SETUP RTSP request

Overview The RealNetworks' Helix Universal Server supports delivery of several different media types via RTSP Real Time Streaming Protocol. Vulnerabilities have been discovered in the way it handles some RTSP requests. These vulnerabilities could allow a remote attacker to execute arbitrary code ...

8.3AI score
SaveExploits0References4
Total number of security vulnerabilities3724