Microsoft Windows Media Center Remote Code Execution (MS16-059: CVE-2016-0185)

A flaw exists in Windows Media Center when parsing MCL files. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted Media Center file. Successful exploitation could allow attackers to execute code on the target system...

SQL Injection Scanning Attempt (CVE-2022-27412)

Remote attackers use SQL injection scanning in order to locate potential SQL injection vulnerabilities on a target server, which could be later used for attacks...

Adobe Shockwave Player Chunk Parsing Uninitialized Object Access (APSB12-13) - Ver2 (CVE-2012-2030)

A remote code execution vulnerability has been reported in Adobe Shockwave player. The vulnerability is due to an error in Adobe Shockwave Player while parsing crafted data inside rcsL RIFF chunk in DIR or DCR files. A remote attacker can exploit this issue by enticing a target user to open a...

Microsoft Windows TCP/IP IOCTL Processing Elevation of Privilege (MS14-070; CVE-2014-4076)

An elevation of privilege vulnerability exists in the Windows TCP/IP stack. The vulnerability is caused when the Windows TCP/IP stack fails to properly handle objects in memory during IOCTL processing. To exploit this vulnerability, an attacker would first have to log on to the system and run a...

Hastymail2 call_user_func_array() Command Injection (CVE-2011-4542)

A command injection vulnerability exists in Hastymail 2.1.1. The vulnerability is due to improper sanitization of special elements used in a request to the server. Remote attacker can exploit this vulnerability by sending malicious HTTP requests to the target server...

HP Network Node Manager I ovopi.dll Buffer Overflow (CVE-2014-2624)

Multiple buffer overflow vulnerabilities exist in HP Network Node Manager I NNMi. These vulnerabilities are caused by copying user supplied data into stack-based buffers without sufficient validation in ovopi.dll. By sending a crafted request to the vulnerable product on port 696/UDP, a remote...

HP Service Virtualization AutoPass License Server Directory Traversal (CVE-2013-6221)

A code execution vulnerability exists in HP Service Virtualization running the AutoPass License Server. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to the vulnerable service. Successful exploitation of this vulnerability could result in creation ...

AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)

Multiple command execution vulnerabilities exist in AlienVault OSSIM. The vulnerabilities are due to failure to safely sanitize user data while handling av-centerd SOAP service requests. A remote unauthenticated attacker can exploit these vulnerabilities by sending crafted requests to affected...

Microsoft SQL 2000 Slammer Worm Denial of Service (CVE-2002-0649)

Slammer is a memory resident worm targeted to attack Microsoft SQL 2000. By propagating rapidly, the worm can cause a denial of service condition on affected targets...

Microsoft Windows Kernel Input Validation Remote Code Execution - Ver2 (CVE-2009-0081)

A code execution vulnerability has been reported in The Windows kernel. The vulnerability is due to an error in the Windows kernel that fails to properly validate input passed from user mode through the kernel component of GDI. Successful exploitation of this vulnerability could allow a remote...

Dlink IP Camera Video Stream Authentication Bypass - Ver2 (CVE-2013-1600)

An authentication bypass vulnerability has been reported in several D-Link IP Cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

Internet Explorer JavaScript window() Memory Corruption (MS05-054) - Ver2 (CVE-2005-1790)

Microsoft Internet Explorer is a web browser capable of displaying HTML encoded pages, downloading files, etc. This application has a built-in JavaScript interpreter. It is also capable of using Document Object Model DOM objects, in particular by providing access to them through JavaScript. A...

Microsoft Excel Document Malformed BIFF Record Heap Overflow (MS09-067) - Ver2 (CVE-2009-3130)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Novell Client nwspool.dll EnumPrinters Function Stack Buffer Overflow (CVE-2008-0639)

A buffer overflow vulnerability has been reported in Novel Client for Windows...

GE Intelligent Platforms Proficy SCADA Substitute.bcl Directory Traversal (CVE-2013-0653)

A directory traversal vulnerability has been reported in GE Intelligent Platforms Proficy...

Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow - Improved Performance (CVE-2008-2086)

The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It allows for the network deployment of Java applications. This component enables stand-alone Java applications to be downloaded from a remote network location and invoked on a target machine. There exists a memory...

Honeywell Multiple Products HscRemoteDeploy.dll ActiveX Control Code Execution (CVE-2013-0108)

A code execution vulnerability exists in Honeywell HscRemoteDeploy.dll ActiveX Control. The vulnerability is due a failure to validate user input that can lead to the execution of an arbitrary HTA application. An attacker can exploit this vulnerability by enticing a user to visit a specially...

Schneider Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2013-0657)

A buffer overflow vulnerability exists in Schneider Electric's Interactive Graphical SCADA System IGSS application. The vulnerability is due to an integer underflow that leads to a stack buffer overflow when processing crafted input sent to ports 12397/TCP and 12399/TCP...

EMC NetWorker nsrd Stack Buffer Overflow (CVE-2012-2288)

A stack buffer overflow vulnerability has been reported in EMC NetWorker...

phpBB viewtopic.php URL Decoding Code Execution (CVE-2004-1315)

A code injection and execution vulnerability has been reported in phpBB. The vulnerability is due to lack of input validation on the highlight parameter supplied to viewtopic.php. A remote attacker can exploit this issue by injecting malicious SQL code to the target server. Successful exploitatio...

FreePBX Recording Interface File Upload Code Execution (CVE-2010-3490)

FreePBX is an open source software implementation of a telephone Private Branch eXchange PBX. It allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. A code execution vulnerability exists i...

Trend Micro Internet Security Pro ActiveX extSetOwner Remote Code Execution (CVE-2010-3189)

Trend Micro's Internet Security Pro 2010 is a PC security suite which includes a large suite of features such as antivirus and antispyware protection, a firewall, keylogger detection, and more. The suite also includes remote backup and restore capabilities in addition to smart phone protection. A...

Oracle Secure Backup Administration Server uname Var Authentication Bypass (CVE-2010-0904)

Oracle Secure Backup is a backup solution allowing for single point of management of data present on network attached storage NAS devices and distributed hosts. An authentication bypass vulnerability has been reported in Oracle Secure Backup server. The vulnerability is due to a flaw in the logic...

Microsoft Internet Explorer 7 HTML Object Memory Corruption (CVE-2007-0947)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. Extensions to the basic HTML standa...

Oracle Java Web Start Launch Command-Line Injection (CVE-2010-0886; CVE-2010-0887; CVE-2010-1423)

The Oracle Java Web Start is a component of the Java 2 Runtime Environment JRE. It facilitates network deployment of applications developed with the Java programming language. This component enables stand-alone Java applications to be downloaded from a remote network location and run on a target...

Microsoft MPEG Layer-3 Audio Decoder Stack Overflow (MS10-026; CVE-2010-0480)

MPEG Layer-3 audio codecs are the MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax and the Fraunhofer IIS MPEG Layer-3 ACM codecs L3codeca.acm and L3codecp.acm. These MPEG Layer-3 audio codecs are provided along with Windows Media files on affected versions of Microsoft Windows. A...

Microsoft Windows WMF Handling Arbitrary Code Execution (CVE-2005-4560)

There exists a code execution vulnerability in Microsoft Windows. The vulnerability is created by unrestricted access to GDI functions through WMF files. An attacker can exploit this vulnerability to supply and execute arbitrary code through calling a specific GDI function via a crafted WMF file...

Microsoft VBScript MsgBox Call with Malicious HLP File (CVE-2010-0483)

A remote code execution vulnerability has been discovered in the way that VBScript interacts with Windows Help files when using Internet Explorer. The vulnerability is due to the VBScript functionality available from within Internet Explorer that exposes the MsgBox function, allowing script on a...

Sun Java Web Start Charset Encoding Stack Buffer Overflow (CVE-2008-1188)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety of programs that are deployed on personal computers as well as embedded devices and cell phones. Java is...

Microsoft Windows Media Runtime Voice Sampler Rate Code Execution (MS09-051; CVE-2009-0555; CVE-2009-2525)

A remote code execution vulnerability exists in the way that Microsoft Windows Media Runtime and the Windows Media Player handle specially crafted ASF files. The Microsoft Windows Media Format Runtime provides information and tools for applications that use Windows Media content. Windows Media...

Novell Client Print Provider Multiple Functions Buffer Overflow (CVE-2006-5854)

Novell NetWare is a network operating system for Microsoft Windows and Linux workstations/servers. Novell NetWare client's Spooler service nwspool.dll is included with the Novell Client for Microsoft Windows, and provides access to remote printing services via Remote Procedure Call RPC. A remote...

Update Protection against Multiple MySQL Query Commands Vulnerabilities

MySQL is an open-source relational database management system that is rapidly growing in popularity. MySQL is free for most applications and is heavily used by the open source community, running on both Windows and UNIX operating systems. SQL query commands form a logical unit and perform a...

Update Protection against Microsoft Internet Explorer DirectAnimation Path (daxctle.ocx) Vulnerabilities (MS06-067)

Microsoft Internet Explorer IE contains heap overflow vulnerabilities. The vulnerabilities exist in Microsoft DirectAnimation Path ActiveX Control DirectAnimation.PathControl that is included in the COM object daxctle.ocx. DirectAnimation is a component of the DirectX family of APIs that provide...

Belkin Wemo UPnP API OS Command Injection (CVE-2019-12780)

A command injection vulnerability exists in Belkin Wemo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Advantech iView UserServlet SQL Injection (CVE-2021-22658)

A SQL injection vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied input when processing the request in UserServlet Java class...

Oracle MySQL Cluster Remote Code Execution (CVE-2022-21490)

A remote code execution vulnerability exists in Oracle MySQL Cluster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

FUDforum Arbitrary File Upload (CVE-2022-30860)

An arbitrary file upload vulnerability exists in FUDforum. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Qognify Ocularis Insecure Deserialization (CVE-2020-27868)

An insecure deserialization vulnerability exists in Qognify Ocularis. Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code on the target system...

Zoho ManageEngine ApplicationManager Command Injection (CVE-2018-7890)

A command injection vulnerability exists in Zoho ManageEngine ApplicationManager. The vulnerability is due to improper validation of the user supplied parameters. A remote attacker can exploit this vulnerability by sending crafted parameters to the target system...

ZEROF Web Server SQL Injection (CVE-2022-25322)

An SQL injection vulnerability exists in ZEROF Web Server. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Horde Groupware Command Injection (CVE-2017-7413)

A command injection vulnerability exists in Horde Groupware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

VCFtools Use-after-free (CVE-2018-11130)

A use-after-free vulnerability exists in Vcftools Project VCFtools. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Device42 CMDB Improper Access Control (CVE-2022-1401)

An improper access control vulnerability exists in Device42 CMDB. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...

APC Smart-UPS Authentication Bypass (CVE-2022-22806)

An authentication bypass vulnerability exists in APC Smart-UPS. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

October CMS Authentication Bypass (CVE-2021-32648)

An authentication bypass vulnerability exists in October CMS. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

FlashGet Buffer Overflow (CVE-2020-28967)

A buffer overflow vulnerability exists in the FlashGet download manager. The vulnerability is due to lack of proper validation of user data in 'current path directory' function...

PTCL Modem HG150-Ub Authentication Bypass (CVE-2021-35296)

A vulnerability exists in PTCL HG150-Ub. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Compal ConnectBox Remote Code Execution (CVE-2019-13025)

A remote code execution vulnerability exists in Compal ConnectBox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear ProSAFE Network Management System Arbitrary File Upload (CVE-2021-27274)

An unrestricted file upload vulnerability exists in Netgear ProSAFE NMS300. The vulnerability is due to improper validation of the uploaded file in the MFileUploadController class...

PHPGurukul Car Rental Arbitrary File Upload (CVE-2021-26809)

An arbitrary file upload vulnerability exists in PHPGurukul Car Rental. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...