Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)

A code execution vulnerability has been reported in the Windows Common Controls. The vulnerability is due to a corruption of the system state by the TabStrip ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected syst...

Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)

A buffer overflow vulnerability has been reported in Nullsoft Winamp. The vulnerability is due to a heap buffer overflow while handling a malformed AVI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows RIFF Buffer Overflow - Ver2 (CVE-2007-0038)

A buffer overflow vulnerability has been reported in Microsoft Windows Xp, Microsoft Windows 2000, Microsoft Windows Vista and Microsoft Windows 2003 Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft PowerPoint Viewer 2003 MSODRAWING Property Heap Buffer Overflow - Ver2 (CVE-2008-0121)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to memory calculation errors in Microsoft PowerPoint when processing a malformed picture inde...

RealNetworks RealPlayer RMP File Heap Buffer Overflow (CVE-2013-6877)

A heap buffer overflow exists in RealNetworks RealPlayer. The vulnerability is due an error when handling RMP files, overly long values for certain tags can result in a heap buffer overflow. A remote unauthenticated attacker could exploit this vulnerability by enticing a user to open a crafted RM...

Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution (MS13-090; CVE-2013-3918)

A remote code execution vulnerability exists in the InformationCardSigninHelper Class ActiveX control, icardie.dll...

EMC AlphaStor Device Manager Buffer Overflow - High Confidence (CVE-2013-0930)

A stack-based buffer overflow vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to a lack of boundary checking when processing certain opcode messages in rrobotd.exe. Unauthenticated attackers can exploit this vulnerability to execute arbitrary code in the...

Plixer Scrutinizer NetFlow and sFlow Analyzer 9 Default MySQL Credential (CVE-2012-3951)

An insecure default credentials config has been reported in Plixer Scrutinizer. The vulnerability is due to an insecure config of default credentials in the MySQL server. The attacker could log into MySQL server with the default credentials, and then gain arbitrary remote code execution...

Novell Netware XNFS.NLM Stack Buffer Overflow (CVE-2010-4227)

Novell Netware is a network operating system developed by Novell. It provides file sharing and other services such as printing and email. A stack buffer overflow vulnerability exists in Novell Netware product. A remote attacker could trigger this flaw by sending a malicious NFS RPC request to the...

HP Data Protector Express DtbClsLogin Stack Buffer Overflow (CVE-2010-3007)

HP OpenView Storage Data Protector is a cross-platform backup solution for Windows, Unix and Linux operating systems. The management console of the Data Protector environment provides quick access to track all Data Protector Express objects, including jobs, media, and scheduling rotation schemes....

Novell iManager Class Name Remote Buffer Overflow (CVE-2010-1929)

Novell iManager is a web-based administration console that provides management of many other Novell products. The iManager service itself is a Java web application running on top of the Tomcat application container. A buffer overflow vulnerability exists in Novell iManager. The vulnerability is d...

IBM Lotus Notes Applix Graphics Parsing Buffer Overflow (CVE-2007-5405)

IBM Lotus Notes is an integrated collaborative software that consists of features such as an email client, calendering, contact management, and instant messaging. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP,...

HP OpenView NNM getnnmdata.exe CGI Hostname Parameter Buffer Overflow (CVE-2010-1555)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A buffer overflow vulnerability...

Microsoft Internet Explorer 7 HTML Object Memory Corruption (CVE-2007-0947)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. Extensions to the basic HTML standa...

IBM Lotus Domino Web Access ActiveX Controls Buffer Overflow (CVE-2007-4474)

IBM Lotus Domino Web Access is a Web browser-based client platform that provides functionality similar to that of IBM Lotus Notes. With Lotus Domino Web Access, the user can send encrypted rich text e-mails, schedule meetings, manage tasks, collaborate with colleagues and so on. There exists a...

Microsoft Windows CSRSS HardError Message Box (MS07-021; CVE-2006-6696)

The Microsoft Windows operating system is one of the most popular systems in use on workstations, home computers, and servers. The operating system is split into several subsystems one of which is the user space subsystem called the Client/Server Runtime Server Subsystem CSRSS. The CSRSS contains...

Microsoft Excel MDXTUPLE and MDXSET Records Heap Overflow (MS10-017; CVE-2010-0260; CVE-2010-0261)

Microsoft Excel is a popular spreadsheet application. Multiple heap overflow vulnerabilities have been identified in Microsoft Excel. These vulnerabilities are due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger...

Sun Java HsbParser.getSoundBank Stack Buffer Overflow (CVE-2009-3867)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java is wide...

Preemptive Protection against HP OpenView Network Node Manager snmp.exe Oid Variable Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM CGI program snmp.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running...

Microsoft Windows Print Spooler NetShareEnum Buffer Overflow (MS09-022; CVE-2009-0228)

The Print Spooler service manages the printing process, which includes such tasks as retrieving the location of the correct printer driver, loading that driver, spooling high-level function calls into a print job, and scheduling print jobs. A buffer overflow vulnerability has been reported in...

Oracle BEA WebLogic IIS connector JSESSIONID Stack Buffer Overflow (CVE-2008-5457)

BEA WebLogic is a Java Application Server platform typically used as the platform for large enterprise web applications. Specifically, the vulnerability exists in the connector software for Apache HTTP server shipped with BEA WebLogic. BEA WebLogic Platform ships with a connector for Apache HTTP...

Microsoft Windows HTTP Services Credential Reflection Code Execution (MS09-013; CVE-2009-0550)

Windows HTTP Services WinHTTP provides developers with an HTTP client application programming interface API to send requests through the HTTP protocol to other HTTP servers. A remote code execution vulnerability has been reported in the way Microsoft Windows HTTP Services handles NTLM credentials...

Microsoft Windows Kernel Input Validation Remote Code Execution (MS09-006; CVE-2009-0081)

The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. A remote code execution vulnerability has been discovered in the Windows kernel.The vulnerability is due to an error in the Windows kernel...

Microsoft Windows Server Service RPC Request Buffer Overflow (MS08-067; CVE-2008-4250)

Microsoft Server Service provides support for Remote Procedure Call RPC, resource sharing, and named pipe communication over the network. A remote code execution vulnerability has been discovered in Microsoft Windows Server Service. The vulnerability is due to an error in the Server service that...

Microsoft Excel Version Information Handling Code Execution (MS07-036; CVE-2007-1756; CVE-2007-3030; CVE-2008-0081)

Microsoft Excel is a popular spreadsheet application. Multiple vulnerabilities have been identified in Microsoft Excel. A remote attacker could exploit these issues via a malformed Excel file. Successful exploitation of these vulnerabilities may allow execution of arbitrary code on a target syste...

Update Protection against Microsoft Exchange Vulnerability (MS06-019)

A vulnerability exists in Microsoft Exchange Server that could allow an attacker to take complete control of the affected system. To exploit the vulnerability, an attacker would have to construct a specially crafted message that could potentially allow remote code execution when an Exchange Serve...

Microsoft Windows NT Null CIFS Sessions (CVE-2000-1200)

...

O2OA Remote Code Execution (CVE-2022-22916)

A remote code execution vulnerability exists in O2OA. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe ColdFusion Improper Input Validation (APSB22-44: CVE-2022-42340)

An improper input validation vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Citrix NetScaler SD-WAN Remote Code Execution (CVE-2017-6316)

A remote code execution vulnerability exists in Citrix NetScaler SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear R6020 Command Injection (CVE-2021-41383)

A command injection vulnerability exists in Netgear R6020. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Active Directory Certificate Services NTLM Relay (CVE-2021-36942; CVE-2022-26925)

An NTLM relay vulnerability exists in Microsoft Active Directory Certificate Services. A remote attack can coerce Windows hosts to authenticate to other machines via the MS-EFSRPC protocol and obtain its NTLM credential. Successful exploitation could lead to complete takeover of the target domain...

ArticleCMS Arbitrary File Upload (CVE-2020-20092; CVE-2020-28063)

An arbitrary file upload vulnerability exists in ArticleCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apache OFBiz Insecure Deserialization (CVE-2021-29200)

An insecure deserialization vulnerability exists in Apache OFBiz. This vulnerability is due to Java serialization issues when processing requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request...

ManageEngine ADSelfService Plus Command Injection (CVE-2021-33256)

A command injection vulnerability exists in ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Joomla! mod_random_image Cross-Site Scripting (CVE-2020-15696)

A stored cross-site scripting vulnerability exists in Joomla! CMS Core. The vulnerability is due to improper validation of the link parameter in the modrandomimage module...

Oracle WebLogic Remote Code Execution (CVE-2020-14882; CVE-2020-14750; CVE-2020-14825; CVE-2020-14883)

A remote code execution vulnerability exists in Oracle WebLogic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Magneto MAGMI Authentication Bypass (CVE-2020-5777)

An authentication bypass vulnerability exists in Magneto MAGMI. Successful exploitation of this vulnerability allow a remote attacker to gain unauthorized access to the affected system...

Quest KACE System Management Appliance Unauthorized Access (CVE-2018-11138)

A command execution vulnerability exists in Quest kace system management appliance 8.0.318. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Phpzag SQL Injection (CVE-2020-8519; CVE-2020-8520; CVE-2020-8521)

An SQL injection vulnerability exists in Phpzag. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

TP-Link Cloud Cameras Stack Overflow (CVE-2020-13224)

A buffer overflow vulnerability exists in TP-Link cloud cameras. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

QuickBox Remote Code Execution (CVE-2020-13448)

A remote code execution vulnerability exists in QuickBox media server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoom Client Arbitrary File Write (CVE-2020-6109)

An arbitrary file write vulnerability exists in Zoom Client. Successful exploitation of this vulnerability could result in code execution on the affected system...

HTTP Suspicious Linux Etc Paths (CVE-2020-13448)

Linux sub-directory etc is a folder which contain all your system configuration file. A remote attacker may create a malicious HTTP request to obtain sensitive information...

Oracle Weblogic Server Remote Code Execution (CVE-2019-2888)

An External Entity Injection vulnerability exists in Oracle Weblogic. This vulnerability is due to insufficient validation of XML data. A remote attacker could exploit this vulnerability by sending malicious XML data to the target server. Successful exploitation of this vulnerability could result...

Advantech WebAccess SCADA Stack-based Buffer Overflow (CVE-2019-3975; CVE-2019-3951)

A stack-based buffer overflow vulnerability exists in the webvrpcs service of Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

vBulletin Forum Remote Code Execution (CVE-2019-16759; CVE-2020-17496)

A remote code execution vulnerability exists in vBulletin Forum. Successful exploitation of this vulnerability will allow remote attackers to execute arbitrary code on the affected system...

Microsoft Word Remote Code Execution (CVE-2019-1201)

A remote code execution vulnerability exists in Microsoft Word. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine OpManager SQL Injection (CVE-2018-20173)

A SQL injection vulnerability exists in ManageEngine. This vulnerability is due to insufficient validation of parameters. Successful exploitation could lead to arbitrary SQL code execution...

Rockwell Automation RNADiagReceiver Denial Of Service (CVE-2012-0222)

A denial of service vulnerability exists in Rockwell Automation RNADiagReceiver. A remote attacker could exploit this vulnerability by sending a specially crafted packet to the target system...