AirLink101 SkyIPCam Command Injection (CVE-2015-2280)

A command execution vulnerability exists in Airlink101 Skyipcam1620W Wireless N Mpeg4Gpp Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Internet Explorer Remote Code Execution (CVE-2018-8619)

A remote code execution vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

VLC Media Player 2.2.8 Vulnerable to Arbitrary Code Execution (CVE-2018-11529)

VideoLAN VLC media player is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2018-8291)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Ek Rishta Component SQL Injection (CVE-2018-12254)

An SQL injection vulnerability exists in Joomla Ek Rishta 2.10. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Windows Desktop Bridge Elevation of Privilege (CVE-2018-0880)

A vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0835)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle WebLogic WLS Security Component Remote Code Execution (CVE-2017-10271; CVE-2017-3506)

A remote code execution vulnerability exists within Oracle WebLogic WLS. This is due to the way Oracle WebLogic handles xml decodes. A successful attack could lead to a remote code execution...

Brother Debut Embedded Httpd Unauthenticated Denial Of Service (CVE-2017-16249)

A denial of service vulnerability exists in Brother Debut embedded httpd server . A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system...

Microsoft Malware Protection Engine VFS API Remote Code Execution (CVE-2017-8558)

A memory corruption vulnerability has been reported in Microsoft Malware Protection Engine. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file. A successful exploitation could lead to arbitrary code execution...

Dovecot SASL Authentication Component Denial of Service (CVE-2016-8652)

A denial of service vulnerability exists in the SASL authentication component of Dovecot server. The vulnerability is due to improper handling of username when processing SASL authentication if auth-policy component has been activated. A remote attacker could exploit this vulnerability by sending...

Microsoft Office DLL Loading (CVE-2017-0197)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused due to an incorrect link to a dynamic-link library file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file which will lead to arbitrary code execution...

Microsoft Edge Security Feature Bypass (MS17-007: CVE-2017-0140)

Security feature bypass exists in Microsoft Edge. The vulnerability is due to a breach in the way Microsoft Edge implements SOP Same Origin Policy for HTML elements present in other browser windows. A remote attacker could exploit this vulnerability by enticing a user to visit a maliciously craft...

WordPress CM Download Manager Code Injection (CVE-2014-8877)

Content Management Download Manager for WordPress is prone to remote PHP-code execution vulnerability because it fails to validate user input. An attacker can exploit this issue to execute arbitrary PHP code within the context of the web server. This may aid in further attacks or lead to a full...

Imagemagick Compressed TIFF File Conversion Remote Code Execution (CVE-2016-8707)

An out-of-bounds write vulnerability exists in ImageMagick's convert utility. The vulnerability is due to improper handling of TIFF image data when deflating an Adobe Deflate compressed TIFF image. A remote attacker could exploit this vulnerability by providing a specially crafted TIFF image to a...

Microsoft DirectShow Heap Corruption Remote Code Execution (MS16-007: CVE-2016-0015)

A remote code execution vulnerability has been reported in Microsoft DirectShow. The vulnerability is due to the way Microsoft DirectShow improperly validates input. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted file...

Tembria Server Monitor Denial of Service (CVE-2010-1316)

A buffer overflow vulnerability has been reported in Tembria Server Monitor. The vulnerability is due to unknown function of the file index.asp. The manipulation with an unknown input leads to a buffer overflow vulnerability...

WebGate Multiple Products WESPPlaybackCtrl Two Stack Buffer Overflow (CVE-2015-2094)

Two stack buffer overflow vulnerabilities exist in WebGate Multiple Products. The vulnerabilities are due to insufficient input validation on the length of the parameter passed to the PlaySiteAllChannel and StopSiteAllChannel methods of the WESPPLAYBACK.WESPPlaybackCtrl control. A remote attacker...

CCProxy Telnet Ping Hostname Buffer Overflow - Ver2 (CVE-2004-2416)

A buffer overflow vulnerability has been reported in Youngzsoft Ccproxy. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Weak SSL RC4 Cipher Suites (CVE-2013-2566; CVE-2015-2808)

RC4 is a widely supported stream cipher, often preferred by TLS servers and other servers using encrypted sessions. It has long been known to have a variety of cryptographic weaknesses. Recent cryptanalysis results, one of which is the "Bar Mitzvah attack", exploit biases in the RC4 keystream to...

HP Data Protector Opcode 42 Directory Traversal - Ver2 (CVE-2013-6194)

A directory traversal vulnerability has been reported in HP Data Protector. The vulnerability is due to a lack of input sanitization on a file name provided with Opcode 42. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...

Microsoft DLL Planting Remote Code Execution (MS15-020; CVE-2015-0096)

A remote code execution vulnerability has been reported in Microsoft Windows . The vulnerability is due to an error in the way Microsoft Windows improperly handles the loading of DLL files. A remote attacker can exploit this issue by enticing a user to open a specially crafted file...

Microsoft Windows SMB Security Feature Bypass (MS15-014; CVE-2015-0009)

A security feature bypass vulnerability exists in Microsoft Windows. The vulnerability is due to the way Group Policy settings are applied when SMB signing failures occur. An attacker can exploit this vulnerability by a man-in-the-middle attack that modifies domain controller responses to client...

Sophos Web Appliance change_password Admin Password Privilege Escalation (CVE-2014-2849)

A privilege escalation vulnerability has been reported in Sophos Web Appliance. The vulnerability is due to errors in a changepassword request when handling user input. A remote authenticated attacker could exploit this vulnerability by placing specially crafted data in a changepassword request...

Microsoft Visual Basic FlexGrid ActiveX Control Rows Parameter Memory Corruption - Ver2 (CVE-2008-4254)

A memory corruption vulnerability has been reported in Microsoft Visual Basic. An attacker could exploit this vulnerability crafted Rows and Cols properties to the ExpandAll and CollapseAll methods, related to access of incorrectly initialized objects and corruption of the system state. Successfu...

Ruby on Rails JSON Processor YAML Deserialization Code Execution - Ver2 (CVE-2013-0333)

A code execution vulnerability has been reported in Ruby on Rails. The vulnerability is due to an input validation error when JSON Processor deserializes YAML. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary code within the context of the underlying web serve...

Microsoft Windows RIFF Buffer Overflow - Ver2 (CVE-2007-0038)

A buffer overflow vulnerability has been reported in Microsoft Windows Xp, Microsoft Windows 2000, Microsoft Windows Vista and Microsoft Windows 2003 Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Nodejs js-yaml load() Code Execution (CVE-2013-4660)

A JavaScript Code Execution vulnerability has been reported in Nodejs...

GnuTLS DANE dane.c Heap Buffer Overflow (CVE-2013-4466)

A heap buffer overflow vulnerability has been reported in GnuTLS...

3S Smart Software Solutions CoDeSys Gateway Server Directory Traversal (CVE-2012-4705)

Multiple directory traversal vulnerabilities have been reported in 3S CoDeSys Gateway Server...

Microsoft Visio Viewer Tree Object Type Confusion Code Execution (MS13-023; CVE-2013-0079)

A remote code execution vulnerability has been reported in Microsoft Visio Viewer.The vulnerability is due to an error in the way Visio Viewer handles memory when parsing specially crafted Visio files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...

Microsoft Windows Common Controls Remote Code Execution (MS12-060; CVE-2012-1856)

A remote code execution vulnerability has been reported in the Windows common controls...

LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal (CVE-2012-1195)

A directory traversal vulnerability has been reported in LANDesk Lenovo ThinkManagement Suite...

HP OpenView Network Node Manager ov.dll Buffer Overflow (CVE-2011-3167)

A stack-based buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM...

Microsoft Embedded OpenType EOT Font Integer Overflow (MS10-076; CVE-2010-1883)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an integer overflow in the Microsoft Windows EOT component, when parsing certain tables within specially crafted files and content containing embedded fonts. A remote attacker may exploit thi...

Tom Sawyer ActiveX Control Memory Corruption (CVE-2011-2217)

A code execution vulnerability has been reported in Tom Sawyer. The vulnerability is due to an error while instantiating the ActiveX control in a browser. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation of this...

Oracle Secure Backup Administration preauth Variable Command Injection (CVE-2010-0906)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A command execution vulnerability...

Apache HTTP Server auth_ldap Logging Function Format String (CVE-2005-3656; CVE-2006-0150)

There exists a format string vulnerability in the authldap module used with Apache HTTP server. The vulnerability is a result of the failure to properly verify string arguments passed to a logging function, resulting in a memory corruption condition. A remote attacker can exploit this vulnerabili...

Multiple Vendors AgentX receive_agentx Stack Buffer Overflow (CVE-2010-1318)

AgentX++ is a C++ object API written by Frank Fock. It is an implementation of the AgentX protocol which is used in multiple applications; including RealNetworks Helix Server and Helix Mobile Server. A stack buffer overflow vulnerability has been reported in multiple products that use the AgentX+...

Adobe RoboHelp Server Arbitrary File Upload and Execute (CVE-2009-3068)

Adobe RoboHelp Server is a server-based Help solution that provides real-time end-user feedback on help and knowledge bases. It gathers and logs data about what questions users ask while searching content and how users navigate through topics. The product consists of an administrative web interfa...

Internet Explorer iepeers.dll Remote Code Execution (CVE-2010-0806)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer handles specific attributes. To trigger this issue, an attacker may create a maliciou...

Microsoft SMB Server Null Pointer Denial of Service (MS10-012; CVE-2010-0022; CVE-2010-0023)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...

Ethereal Netflow Dissector Buffer Overflow (CVE-2004-0176)

There is a buffer overflow in the NetFlow dissector within Ethereal, a program that has the ability to decode packets containing NetFlow packet data as per Cisco's specification. A simple exploit of this vulnerability, where the buffer is overrun with arbitrary data, will result in the terminatio...

Internet Explorer HTML Component Handling Remote Code Execution (MS09-054; CVE-2009-2529)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles argument validation of a variant in specific situations. The vulnerability occurs when Internet Explorer validates arguments incorrectly und...

Internet Explorer Uninitialized Object Memory Corruption (MS09-054; CVE-2009-2530)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in Internet Explorer. When Internet Explorer attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way that an attacker coul...

Microsoft Telnet Services Credential Reflection Code Execution (MS09-042; CVE-2009-1930)

Telnet is a bidirectional communications protocol that allows for command line remote administration over the TCP protocol. A remote code execution vulnerability has been reported in the way Microsoft Windows Telnet Service handles NTLM credentials. The vulnerability is due to an error in the...

Internet Explorer HTML Objects Memory Corruption (MS09-034; CVE-2009-1918)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles table operations in specific situations. When Internet Explorer handles table operations in specific situations, it may corrupt memory in su...

Internet Explorer Uninitialized Memory Corruption (MS09-034; CVE-2009-1919)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way Internet Explorer accesses an object that has been deleted. When Internet Explorer attempts to access an object that has been deleted, it may corrupt memory in such a way...

Update Protection against HP OpenView Network Node Manager rping Stack Buffer Overflow

A buffer overflow vulnerability exists in HP Network Node Manager, a software application designed for management, maintenance and monitoring of networks and network devices. The flaw is due to a boundary error when processing crafted packets sent to the server. Remote attackers could exploit thi...

Microsoft PowerPoint Data Out of Bounds Stack Buffer Overflow (MS09-017; CVE-2009-1128; CVE-2009-1131)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overflow vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading data that is too large from...