IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow (CVE-2011-1213)

A code execution vulnerability has been reported in IBM Lotus Notes. The vulnerability is due to an error while parsing the headers of LZH files. A remote attacker may exploit this vulnerability by enticing a target user to open an email containing a specially crafted LZH file. Successful...

HP OpenView NNM getnnmdata.exe CGI MaxAge Parameter Buffer Overflow (CVE-2010-1553)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability exists in HP OpenView Network Node Manag...

Preemptive Protection against HP OpenView Network Node Manager snmp.exe Oid Variable Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM CGI program snmp.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running...

Oracle Database Trigger MDSYS.SDO_TOPO_DROP_FTBL SQL Injection (CVE-2008-3979)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects such as procedures, functions, triggers, variables, constants, cursors, and exceptions, are provided in order t...

Microsoft VB Common Controls Animation Object Buffer Overflow (MS08-070; CVE-2008-4255)

The Microsoft Visual Studio 6.0 integrated development environment IDE suite is designed for building Windows based applications and Web solutions. The product contains several tools which can be used to design programs in languages such as Visual C++, or Visual Basic. Microsoft Basic 6.0 is...

Microsoft Excel Document Malformed BIFF Record Heap Overflow (MS09-067; CVE-2009-3130)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Oracle Application Server BPEL Module Cross Site Scripting (CVE-2008-4014)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. BPEL Business Process Execution Language is an XML based language used for describing...

FFmpeg 4xm Processing Memory Corruption (CVE-2009-0385)

FFmpeg is a set of libraries and executables that can be used to record, convert and stream digital audio and video in numerous formats. FFmpeg is a command line tool that is composed of a collection of free software / open source libraries. It includes libavcodec, an audio/video codec library us...

Veritas Backup Exec Agent Browser Registration Request Buffer Overflow (CVE-2004-1172)

Backup Exec is a backup solution offered by VERITAS. It provides both server-side and client side components and communication mechanisms for scalability and ease of administration purposes. The client-side component is known as the Backup Exec Agent. The Backup Exec Agent Browser is a server...

Workaround for Microsoft ISA Server TCP State Limited Denial of Service Vulnerability (MS09-016)

A denial of service vulnerability has been reported in Microsoft Internet Security and Acceleration ISA Server. ISA Server, originating as Microsoft Proxy Server, is a Firewall & Security product that provides Application-Layer Firewalling, acts as a VPN endpoint, and provides Internet Access for...

Microsoft Visual Studio MaskedEdit ActiveX Control Buffer Overflow (MS08-070; CVE-2008-3704)

Microsoft Visual Studio is designed for building Windows based applications and Web solutions. A buffer overflow vulnerability has been reported in Microsoft Visual Studio. The vulnerability is due to a memory corruption error in the Visual Basic MaskedEdit ActiveX control when it fails to proper...

Update Protection against Microsoft Internet Explorer DirectAnimation Path (daxctle.ocx) Vulnerabilities (MS06-067)

Microsoft Internet Explorer IE contains heap overflow vulnerabilities. The vulnerabilities exist in Microsoft DirectAnimation Path ActiveX Control DirectAnimation.PathControl that is included in the COM object daxctle.ocx. DirectAnimation is a component of the DirectX family of APIs that provide...

Advantech iView UserServlet SQL Injection (CVE-2021-22658)

A SQL injection vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied input when processing the request in UserServlet Java class...

O2OA Remote Code Execution (CVE-2022-22916)

A remote code execution vulnerability exists in O2OA. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

GitLab Cross-site Scripting (CVE-2022-1190)

A cross-site scripting vulnerability exists in GitLab. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

BeyondTrust Secure Remote Access Base Software Cross Site Scripting (CVE-2021-31589)

A cross-site scripting vulnerability exists in BeyondTrust Secure Remote Access Base Software. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Apache Log4j Remote Code Execution (CVE-2021-44228; CVE-2021-45046)

A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Draytek VigorConnect Cross-Site Request Forgery (CVE-2021-20126)

A cross-site request forgery vulnerability exists in Draytek VigorConnect. A remote attacker can exploit this vulnerability by enticing a target authenticated user to visit a specially crafted page...

Draytek VigorConnect Directory Traversal (CVE-2021-20123)

A directory traversal vulnerability exists in Draytek VigorConnect. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Atlassian Jira Gadgets Plugin Authentication Bypass (CVE-2020-36287)

An authentication bypass vulnerability exists in Atlassian Jira Gadgets Plugin. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Realtek Jungle SDK Buffer Overflow (CVE-2021-35392; CVE-2021-35393; CVE-2021-35395)

A buffer overflow vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Microsoft Scripting Engine Memory Corruption (CVE-2021-34448)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PrestaShop SQL Injection (CVE-2021-3110)

An SQL injection vulnerability exists in PrestaShop. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Windows WebDAV Client Privilege Escalation (CVE-2016-0051)

A privilege escalation vulnerability exists in Microsoft Windows WebDAV Client. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

PluXml Remote Code Execution (CVE-2020-18185)

A remote code execution vulnerability exists in PluXml. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TP-LINK TL-WR849N Authentication Bypass (CVE-2019-19143)

An authentication bypass vulnerability exists in TP-LINK TL-WR849N. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

WordPress NextGEN Gallery Plugin Cross-Site Scripting (CVE-2010-1186)

A script injection vulnerability exists in Alex rabe nextgen gallery 0.33. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft Office Remote Code Execution (CVE-2017-0261)

A remote code execution vulnerability exists in Encapsulated PostScript EPS of Microsoft Office. The vulnerability is due to the way that Microsoft Office does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing ...

Apache Archiva Command Injection (CVE-2020-9495)

A command injection vulnerability exists in Apache Archiva. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

BSA Radar Information Disclosure (CVE-2020-14946)

An information disclosure vulnerability exists in BSA Radar. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

GoAhead Command Injection (CVE-2019-15311; CVE-2019-15310; CVE-2019-15312)

A command injection vulnerability exists in GoAhead. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...

Joomla Ek Rishta SQL Injection (CVE-2018-7315)

An SQL injection vulnerability exists in Joomla Ek Rishta component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Schneider Electric IGSSupdateservice Directory Traversal (CVE-2020-7478)

A directory traversal vulnerability exists in Schneider Electric IGSS SCADA System. The vulnerability is due to improper handling of a user-supplied path in IGSSupdateservice service...

Zoho ManageEngine Remote Code Execution (CVE-2020-10189)

A remote code execution vulnerability exists in Zoho ManageEngine Desktop Central. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech WebAccess Buffer Overflow (CVE-2019-6550)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability will allow remote attackers to execute arbitrary code on the affected system...

Sony Smart TV Authentication Bypass Information Disclosure (CVE-2019-11336)

An authentication bypass vulnerability exists in Sony Smart TV. Successful exploitation could result in the disclosure of sensitive user information...

Drupal Core stream wrapper Insecure Deserialization (CVE-2019-6339)

An insecure deserialization vulnerability exists in Drupal Core. The vulnerability is in a stream wrapper when performing file operations. Successful exploitation of this vulnerability could result in arbitrary code execution under the security context of the web server...

PhpMyAdmin tbl_replace.php Local File Inclusion (CVE-2018-19968)

A local file inclusion vulnerability exists in phpMyAdmin. The vulnerability is due to improper sanitization of a column in the column info table. A remote, authenticated attacker could exploit this vulnerability by sending a request with crafted SQL statements to the target server. Successful...

SugarCRM Cross-Site Scripting (CVE-2018-17784)

A cross-site scripting vulnerability exists in SugarCRM 6.5.26. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8671)

An off-by-one vulnerability exists in Microsoft Edge Chakra JavaScript Engine. The vulnerability is due to the way Microsoft Edge Chakra JavaScript engine renders when handling objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8601)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system...

WordPress Unauthorized Password Reset (CVE-2017-8295)

An unauthorized password reset vulnerability exists in WordPress core. The vulnerability is due to WordPress using untrusted data when creating a password reset e-mail. Successful exploitation of this vulnerability could allow a remote attacker to reset user's password and gain unauthorized acces...

HP OpenView Network Node Manager Accept-Language Buffer Overflow - Ver2 (CVE-2009-4179)

A stack buffer overflow exists in HP OpenView Network Node Manager NNM CGI program ovalarm.exe. The vulnerability is due to a boundary error when processing the Accept-Language HTTP header and the OvAcceptLang cookie value in a crafted HTTP request. A remote unauthenticated attacker can exploit...

Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)

The Microsoft Internet Explorer application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. This application has a built in functionality to interpret JavaScript and VBScript code. It is also capable of using the Document...

Technicolor DT5130 Router Command Injection (CVE-2014-9144)

A command injection vulnerability has been reported in Technicolor DT5130 Router. Successful exploitation would allow an attacker to execute commands in the security context of the logged on user...

Google Android Browser Same Origin Policy Bypass (CVE-2014-6041)

A security bypass vulnerability has been reported in Google Android's stock browser. Attackers can exploit this issue to bypass the same-origin policy and certain access restrictions to access data, or execute arbitrary script code in the browser of an unsuspecting user in the context of another...

Symantec Endpoint Protection Manager secars.dll Buffer Overflow (CVE-2013-1612)

A buffer overflow vulnerability exists in Symantec Endpoint Protection Manager SEPM. The vulnerability is caused by insufficient boundary check while processing external input. By supplying a crafted HTTP request to the vulnerable server, a remote unauthenticated attacker can possibly exploit thi...

NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)

A security vulnerability was found in FrontView web interface in NETGEAR ReadyNAS RAIDiator. The vulnerability is due to the nphandler.pl script failing to sanitize input. A remote attacker can exploit this weakness by execute arbitrary Perl code via a crafted request...

Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)

A buffer overflow vulnerability has been reported in Nullsoft Winamp. The vulnerability is due to a heap buffer overflow while handling a malformed AVI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Poster Software PUBLISH-iT PUI File Processing Buffer Overflow (CVE-2014-0980)

A stack buffer overflow vulnerability exists in Poster Software PUBLISH-iT. The vulnerability is due to insufficient validation on the length of entry names in a "styl" record when processing PUI files. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a...