13538 matches found
Digium Asterisk chan_skinny SCCP session Denial of Service (CVE-2017-17090)
A denial of service vulnerability exists in Digium Asterisk. The vulnerability is due to a processing flaw in the chanskinny SCCP packet processing module. A remote unauthenticated attacker can exploit this vulnerability by sending a flood of certain requests to asterisk and exhaust available...
Pivotal Spring PATCH Request Remote Code Execution (CVE-2017-8046)
A remote code execution vulnerability exists in Pivotal Spring Data REST. The vulnerability is due to insufficient validation of user supplied input. A remote attacker can exploit this vulnerability to execute arbitrary code on the affected server...
HPE Intelligent Management Center dbman RestoreDBase Command Injection (CVE-2017-5817; CVE-2017-5819)
A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability exists due to missing validation of user-provided parameters when handling RestoreDBase commands for MSSQL and MySQL databases. A remote, unauthenticated attacker can exploit th...
GoAutoDial 3.3 Authentication Bypass Command Injection (CVE-2015-2843; CVE-2015-2844; CVE-2015-2845)
An SQL injection vulnerability has been reported in GoAutoDial version 3.3. The vulnerability is due to improper validation of the user input. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server...
Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0108)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way the Windows Uniscribe handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...
Microsoft Windows Graphics Memory Corruption (MS16-039: CVE-2016-0145)
A vulnerability was found in Microsoft Windows that could potentially lead to remote code execution. The main cause is the lack of validation on glyph bitmap boundary during scaling operation. This vulnerability can be exploited using a malformed font file TTF...
Multiple Vendor TCP Timestamp Option Denial of Service attack - Ver2 (CVE-2005-0356)
A denial-of-service vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Fortinet Single Sign On Hello Message Multiple Vulnerabilities (CVE-2015-2281)
Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...
WebGate Multiple Products WESPMonitor Stack Buffer Overflow (CVE-2015-2097)
A stack buffer overflow vulnerability exists in multiple products of WebGate. The vulnerability is due to insufficient boundary checks when processing parameters of methods LoadImage and LoadImageEx of the WESPMONITORLib.WESPMonitorCtrl ActiveX control. A remote attacker could exploit this...
ManageEngine NetFlow Analyzer And IT360 DisplayChartPDF Directory Traversal (CVE-2014-5446)
A directory traversal vulnerability exists in ManageEngine Netflow Analyzer and IT360. The vulnerability is due to lack of authentication and insufficient input validation on the filename parameter sent to the DisplayChartPDF servlet in HTTP requests. A remote unauthenticated attacker can downloa...
HP Data Protector Opcode 305 Directory Traversal (CVE-2014-5160)
A directory traversal vulnerability exists in HP Data Protector. The vulnerability is due to a lack of input sanitization of a file name provided with Opcode 305. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service. Successful...
Microsoft Office Excel Record Parsing Integer Overflow - Ver2 (CVE-2010-3230)
A integer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an integer overflow parsing in an Excel file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Lattice Semiconductor PAC-Designer Symbol Value Buffer Overflow - Ver2 (CVE-2012-2915)
A buffer overflow vulnerability has been reported in Lattice Semiconductor PAC-Designer. The vulnerability is due to the improper handling of validation of specially crafted pac files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...
Microsoft Excel OBJ Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-0822)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
MW6 Technologies Aztec ActiveX Control Buffer Overflow (CVE-2013-6040)
A buffer overflow vulnerability exists in MW6 Technologies Aztec ActiveX Control. The vulnerability is due to improperly handled user input in the 'Data' parameter. A remote attacker could exploit the vulnerability via a specially crafted web page...
vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload (CVE-2013-3215)
A remote code execution vulnerability has been reported in VTiger CRM.The vulnerability is due to lack of validation of file types uploaded to the server throught the AddEmailAttachment SOAP service. A remote attacker can exploit this vulnerability to access the script remotely and have it run th...
Sun Java Web Start JRE Buffer Overflow - Ver2 (CVE-2007-3655)
A buffer overflow vulnerability has been reported in Sun JRE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HP Data Protector CRS Opcode 259 Stack Buffer Overflow (CVE-2013-2329)
A stack buffer overflow has been reported in HP Data Protector. The vulnerability is in the CRS.exe service, which listens on a randomly chosen port. The application fails to sanitize input with opcode 259, which can result in a stack buffer overflow. A remote, unauthenticated attacker can exploi...
Microsoft Visio Viewer Tree Object Type Confusion Code Execution (MS13-023; CVE-2013-0079)
A remote code execution vulnerability has been reported in Microsoft Visio Viewer.The vulnerability is due to an error in the way Visio Viewer handles memory when parsing specially crafted Visio files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...
Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow (CVE-2013-0003)
A buffer overflow exists in the System.DirectoryServices.Protocols S.DS.P namespace method in the .NET framework. The vulnerability is due to an error in the validation of the size of objects in memory prior to copying them into an array.An attacker can remotely exploit this vulnerability by...
EMC NetWorker nsrd Stack Buffer Overflow (CVE-2012-2288)
A stack buffer overflow vulnerability has been reported in EMC NetWorker...
Ruby on Rails Hash SQL Injection (CVE-2012-2695)
An SQL injection vulnerability has been reported in Ruby on Rails Active Record...
Internet Explorer HtmlDlgHelper Class Memory Corruption (MS10-071; CVE-2010-3329)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. To trigger this issue, ...
Preemptive Protection against HP OpenView Network Node Manager webappmon.exe execvp_nc Buffer Overflow
A vulnerability has been reported in HP OpenView Network Node Manager NNM. The vulnerability is due to a boundary error when processing maliciously crafted HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP request to a target server,...
HP OpenView Network Node Manager OvJavaLocale Buffer Overflow (CVE-2010-2709)
HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerability h...
Internet Explorer Refresh Race Condition Memory Corruption (MS10-053; CVE-2010-2558; CVE-2011-1963)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that may have been corrupted due to a race condition. To trigger this issue, an attacker may create a malicious web page that will explo...
Free Download Manager Torrent File Parsing Multiple Buffer Overflows (CVE-2009-0184)
Free Download Manager is an open source free download accelerator and manager software distributed under GPL license. It includes various features and components, such as upload manager, Flash video download, Remote Control Server, BitTorrent support, smart file management, a powerful scheduler a...
Microsoft MPEG Layer-3 Audio Decoder Stack Overflow (MS10-026; CVE-2010-0480)
MPEG Layer-3 audio codecs are the MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax and the Fraunhofer IIS MPEG Layer-3 ACM codecs L3codeca.acm and L3codecp.acm. These MPEG Layer-3 audio codecs are provided along with Windows Media files on affected versions of Microsoft Windows. A...
Microsoft Internet Explorer CSS Import Use-After-Free Code Execution (MS11-003; CVE-2004-0842; CVE-2010-3971)
Microsoft Internet Explorer is a popular web browser provided by Microsoft Corporation. Its web engine is also incorporated into other Microsoft products including Outlook. The product supports Cascading Style Sheets. A vulnerability exists in the way Microsoft Internet Explorer renders web pages...
RealNetworks RealPlayer RealMedia File Format Processing Heap Corruption (CVE-2007-5081)
RealPlayer and RealOne Player are media player applications developed by RealNetworks, Inc. These applications are capable of playing back numerous multimedia file formats. The application can open media files from local file system or network servers. A remote heap corruption vulnerability exist...
MySQL MaxDB WebDBM Server Buffer Overflow (CVE-2006-4305)
MaxDB is an open source database application suite developed by MySQL AB that is available for various operating systems. The software bundles an HTTP server component, named Webtool, to provide a web-based application interface. Clients can connect to the Webtool with a web browser and access...
Microsoft Windows Media Runtime Voice Sampler Rate Code Execution (MS09-051; CVE-2009-0555; CVE-2009-2525)
A remote code execution vulnerability exists in the way that Microsoft Windows Media Runtime and the Windows Media Player handle specially crafted ASF files. The Microsoft Windows Media Format Runtime provides information and tools for applications that use Windows Media content. Windows Media...
Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056; CVE-2009-2511)
The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and encoding to and decoding from Abstract Syntax Notation One ASN.1 to their Windows-based applications. A spoofing vulnerability has been reported i...
Microsoft Windows Workstation Service Buffer Overflow (MS06-070; CVE-2006-4691)
The Server Service SRVSVC is one of the network services supplied by Microsoft. It supports file, print, and named-pipe sharing over Windows-based networks, and allows named pipe communication between applications running on distributed systems. By supplying malformed parameters to some of the AP...
Microsoft Windows ANI File Parsing Buffer Overflow (MS05-002; CVE-2004-1049; CVE-2007-0038)
ANI is a Windows Animated cursor file format. Specially crafted ANI files may be used to create a DoS condition and in some cases, arbitrary code execution...
Advantech iView UserServlet SQL Injection (CVE-2021-22658)
A SQL injection vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied input when processing the request in UserServlet Java class...
D-Link Central WiFiManager CWM-100 SQL Injection (CVE-2019-13373)
An SQL injection vulnerability exists in D-Link Central WiFiManager CWM-100. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
H2 Database Remote Code Execution (CVE-2022-23221)
A remote code execution vulnerability exists in H2 Database console. This vulnerability is due to improper input validation when handling a specific JDBC URL...
QNAP NAS Photo Station Arbitrary File Write (CVE-2022-27593)
An arbitrary file write vulnerability exists in QNAP NAS Photo Station. Successful exploitation of this vulnerability could result in code execution on the affected system...
Magnolia CMS Cross-Site Scripting (CVE-2022-33098)
A cross-site scripting vulnerability exists in Magnolia CMS. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Advantech R-SeeNet telnet_form.php Cross-Site Scripting (CVE-2021-21799)
A reflected cross-site scripting vulnerability exists in Advantech R-SeeNet. The vulnerability is due to improper input validation in telnetform.php...
Apache Log4j Remote Code Execution (CVE-2021-44228; CVE-2021-45046)
A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
OpenSIS SQL Injection (CVE-2021-40618; CVE-2021-40543)
An SQL injection vulnerability exists in OpenSIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
PTCL Modem HG150-Ub Authentication Bypass (CVE-2021-35296)
A vulnerability exists in PTCL HG150-Ub. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Mimosa PTP Devices Stored Cross Site Scripting (CVE-2020-25205)
A cross-site scripting vulnerability exists in Mimosa PTP Devices. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Compal ConnectBox Remote Code Execution (CVE-2019-13025)
A remote code execution vulnerability exists in Compal ConnectBox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Blue Coat ASG Command Injection (CVE-2016-9091)
A command execution vulnerability exists in Blue Coat Advanced Secure Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
SourceCodester Water Billing System SQL Injection (CVE-2020-28183)
An SQL injection vulnerability exists in SourceCodester Water Billing System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
PluXml Remote Code Execution (CVE-2020-18185)
A remote code execution vulnerability exists in PluXml. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Uninitialized Memory Corruption (CVE-2009-0075)
A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. Successful exploitation of this vulnerability will crash the browser, allowing execution of arbitrary code on the vulnerable...