13538 matches found
Apache Tika Chmparser Denial Of Service (CVE-2018-1339)
A denial-of-service vulnerability exists in Apache Tika. The vulnerability is due to improper handling of a Microsoft Compiled HTML Help file during enumerating its listing chunks...
Microsoft Malware Protection Engine Remote Code Execution (CVE-2018-0986)
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption .An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the Local Syst...
Web servers PHPMyAdmin Suspicious Table Hyperlink (CVE-2017-1000499)
A PhpMyAdmin user could be subject to a phishing attack. This is due to the way PhpMyAdmin handles modify requests. A successful attack could lead to malicious SQL command execution...
Brother Debut Embedded Httpd Unauthenticated Denial Of Service (CVE-2017-16249)
A denial of service vulnerability exists in Brother Debut embedded httpd server . A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system...
Wireless IP Camera (P2P) WIFICAM Cameras Information Disclosure (CVE-2017-8225)
An information disclosure vulnerability exists in multiple Wireless IP Camera P2P WIFICAM cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...
Microsoft Data Access Components Overflow (CVE-2002-1142)
A heap-based buffer overflow vulnerability exists in Remote Data Services RDS component of Microsoft Data Access Components MDAC. The vulnerability is due to a design error in the processing of malformed HTTP request to the Data Stub. Successful exploitation of this vulnerability allows remote...
WebGate Multiple Products WESPSerialPortCtrl Buffer Overflow (CVE-2015-2097)
A buffer overflow vulnerability exists in WebGate Multiple Products. The vulnerability is due to insufficient input validation of the length of the parameters passed to the Connect method of WESPSerialPort.WESPSerialPortCtrl.1. A remote attacker could exploit this vulnerability by enticing a user...
Apache Qpid Session.gap Denial of Service - ver 2 (CVE-2015-0203)
A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...
Ultra Mini HTTPD Resource Name Request Handling Stack Buffer Overflow - Ver2 (CVE-2013-5019)
A buffer overflow vulnerability has been reported in Vector Ultra Mini HTTPD. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Adobe Shockwave Player Chunk Parsing Uninitialized Object Access (APSB12-13) - Ver2 (CVE-2012-2030)
A remote code execution vulnerability has been reported in Adobe Shockwave player. The vulnerability is due to an error in Adobe Shockwave Player while parsing crafted data inside rcsL RIFF chunk in DIR or DCR files. A remote attacker can exploit this issue by enticing a target user to open a...
Internet Explorer Malformed IFRAME Buffer Overflow (MS04-040) - Ver2 (CVE-2004-1050)
Internet Explorer IE is a popular web browser developed by Microsoft corporation. A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is in the way Microsoft Internet Explorer parses certain parameters of an IFRAME tag. An attacker can exploit this...
HP Network Node Manager I ovopi.dll Command 685 Memory Corruption (CVE-2014-2624)
A memory corruption vulnerability in HP Network Node Manager I NNMi ha been reported. The vulnerability is caused by using remotely supplied data as a pointer without sufficient validation in ovopi.dll. By sending a crafted request to the vulnerable product on port 696/UDP, a remote unauthenticat...
ManageEngine Multiple Products FileCollector doPost Directory Traversal (CVE-2014-6034)
A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation on parameters sent to "/servlet/com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector" in HTTP requests...
AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)
Multiple command execution vulnerabilities exist in AlienVault OSSIM. The vulnerabilities are due to failure to safely sanitize user data while handling av-centerd SOAP service requests. A remote unauthenticated attacker can exploit these vulnerabilities by sending crafted requests to affected...
AlienVault OSSIM av-centerd Util.pm get_license Arbitrary Command Execution (CVE-2014-3805)
An arbitrary command execution vulnerability exists in AlienVault OSSIM. The vulnerability is due to a failure to safely sanitize user data while handling SOAP service requests via the getlicense function of Util.pm. A remote unauthenticated attacker can exploit this vulnerability by sending...
Internet Explorer JavaScript window() Memory Corruption (MS05-054) - Ver2 (CVE-2005-1790)
Microsoft Internet Explorer is a web browser capable of displaying HTML encoded pages, downloading files, etc. This application has a built-in JavaScript interpreter. It is also capable of using Document Object Model DOM objects, in particular by providing access to them through JavaScript. A...
Windows Media Player ActiveX Missing Codec Code Execution - Ver2 (CVE-2010-0268)
A code execution vulnerability has been reported in Microsoft Windows Xp, Microsoft Windows Media Player and Microsoft Windows 2000. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Viscom Software Movie Player Pro ActiveX Control Buffer Overflow - Ver2 (CVE-2010-0356)
A buffer overflow vulnerability has been reported in Viscom Software Movie Player Pro SDK. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
GLPI install.php Remote Command Execution (CVE-2013-5696)
A command execution vulnerability has been reported in GLPI...
PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)
A remote variable manipulation vulnerability has been reported in PhpMyAdmin...
Portable SDK for UPnP Devices libupnp Root Device Service Name Stack Buffer Overflow (CVE-2012-5960)
A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing service name URIs in the function called from the SSDP protocol parser. A remote attacker can exploit this vulnerability to execute...
Trend Micro Control Manager CmdProcessor.exe AddTask Stack Buffer Overflow (CVE-2011-5001)
A stack buffer overflow vulnerability has been reported in Trend Micro Control Manager...
Microsoft Windows Media Player MIDI Code Execution (MS12-004; CVE-2012-0003)
A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in Windows Media Player while handling specially crafted MIDI files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted MIDI fi...
Microsoft Windows NDISTAPI Code Execution (MS11-062; CVE-2011-1974)
This is a code execution vulnerability. The vulnerability is due to improper validation of user input by NDISTAPI. A remote attacker could trigger this flaw by convincing an unsuspecting victim to open a malicious file. Successful exploitation of this vulnerability may allow an attacker to gain...
Trend Micro Internet Security Pro ActiveX extSetOwner Remote Code Execution (CVE-2010-3189)
Trend Micro's Internet Security Pro 2010 is a PC security suite which includes a large suite of features such as antivirus and antispyware protection, a firewall, keylogger detection, and more. The suite also includes remote backup and restore capabilities in addition to smart phone protection. A...
Sun Java Web Start Charset Encoding Stack Buffer Overflow (CVE-2008-1188)
Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety of programs that are deployed on personal computers as well as embedded devices and cell phones. Java is...
HP OpenView Network Node Manager rping Stack Buffer Overflow (CVE-2009-1420)
HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A stack-based buffer overflo...
Oracle BEA WebLogic Server Apache Connector Buffer Overflow (CVE-2008-4008)
Oracle BEA WebLogic Server is an enterprise-class multi-tier Java Application Server platform. WebLogic is typically used as the platform for large enterprise web applications. It supports various databases including Oracle, DB2, Microsoft SQL Server, MySQL and other JDBC-compliant databases. The...
Novell eDirectory HTTP Server Redirection Buffer Overflow (CVE-2006-5478)
Novell eDirectory is a Lightweight Directory Access Protocol LDAP server, intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. A code execution vulnerability has been reported in the...
Update Protection against IBM Access Support ActiveX GetXMLValue Method Buffer Overflow
IBM Access Support ActiveX Control contains a buffer overflow vulnerability. The IBM Access Support ActiveX control is used by the vendor to collect system information, such as make, model, serial number, OS version, etc. This control is available on the IBM / Lenovo web site, and may also come...
Novell Client Print Provider Multiple Functions Buffer Overflow (CVE-2006-5854)
Novell NetWare is a network operating system for Microsoft Windows and Linux workstations/servers. Novell NetWare client's Spooler service nwspool.dll is included with the Novell Client for Microsoft Windows, and provides access to remote printing services via Remote Procedure Call RPC. A remote...
Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)
Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...
Malformed Key Exchange Init Message (CAN-2006-2407; CAN-2006-2421)
...
Internet Explorer Multiple Protections (CVE-2005-2831; CVE-2006-0003)
...
Schneider Electric IGSS Buffer Overflow (CVE-2021-22802)
A buffer overflow exists in Schneider Electric IGSS. This vulnerability is due to insufficient input validation...
D-Link DIR-816 Command Injection (CVE-2022-37130)
A command injection vulnerability exists in D-Link DIR-816. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
OpenCart Remote Code Execution (CVE-2022-24108)
A remote code execution vulnerability exists in Skyoftech So Listing Tabs module for OpenCart. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
APC Smart-UPS Authentication Bypass (CVE-2022-22806)
An authentication bypass vulnerability exists in APC Smart-UPS. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
FlashGet Buffer Overflow (CVE-2020-28967)
A buffer overflow vulnerability exists in the FlashGet download manager. The vulnerability is due to lack of proper validation of user data in 'current path directory' function...
PHP Information Disclosure Over HTTP (CVE-2021-21804)
PHP Information Disclosure Over HTTP...
Fortinet FortiOS SSL VPN Buffer Overflow (CVE-2018-13381)
A buffer overflow vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
TOTOLINK Realtek SDK Routers Authentication Bypass (CVE-2019-19825)
An authentication bypass vulnerability exists in TOTOLINK Realtek SDK Routers. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
QNAP Photo Station Remote Code Execution (CVE-2019-7192; CVE-2019-7193; CVE-2019-7194; CVE-2019-7195)
A remote code execution vulnerability exists in QNAP NAS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Netis WF2419 Remote Code Execution (CVE-2019-19356)
A remote code execution vulnerability exists in Netissystems wf2419 firmware 1.2.31805. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Argus Surveillance DVR Directory Traversal (CVE-2018-15745)
A directory traversal vulnerability exists in Argus Surveillance DVR. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Adobe Font Manager Library Remote Code Execution Vulnerability (CVE-2020-1020)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Digium Asterisk Denial Of Service (CVE-2019-12827)
A denial-of-service vulnerability exists in Digium Asterisk. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft SharePoint Remote Code Execution (CVE-2019-1257)
A remote code execution vulnerability exists in Microsoft Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Flexense DiskBoss Enterprise Buffer Overflow (CVE-2018-5262)
A stack buffer overflow vulnerability exists in the web server of DiskBoss Enterprise. The vulnerability is due to the way DiskBoss Enterprise handles bounds checking. A remote, authenticated attack can lead to a stack buffer overflow...