Microsoft Windows SMB Security Feature Bypass (MS15-014; CVE-2015-0009)

A security feature bypass vulnerability exists in Microsoft Windows. The vulnerability is due to the way Group Policy settings are applied when SMB signing failures occur. An attacker can exploit this vulnerability by a man-in-the-middle attack that modifies domain controller responses to client...

Microsoft IIS idq.dll IDAIDQ ISAPI Overflow Buffer Overflow - Ver2 (CVE-2001-0500)

A buffer overflow vulnerability has been reported in Microsoft IIS, Microsoft Inbex Server and Microsoft Indexing Service. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)

TODO...

HP Sprinter Tidestone Formula One DefaultFontName Buffer Overflow (CVE-2014-2638)

A code execution vulnerability exists in HP Sprinter. The vulnerability is due to a buffer overflow while handling the DefaultFontName property within the Tidestone Formula One ActiveX control. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to follow a...

Oracle Event Processing FileUploadServlet Directory Traversal (CVE-2014-2424)

A code execution vulnerability has been reported in Oracle Event Processing. The vulnerability is due to a directory traversal within the FileUploadServlet servlet. A remote unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request...

ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)

A code execution vulnerability has been reported in ZoneMinder. The vulnerability is due to flaw in the index.php script that is triggered when user supplied input used in the /includes/actions.php file is passed from the 'runeState' parameter to the 'packageControl, which calls exec with user...

RealNetworks RealPlayer RMP File Stack Buffer Overflow (CVE-2013-6877)

A stack buffer overflow exists in RealNetworks RealPlayer. Successful exploitation could result in arbitrary code execution in the context of the currently logged in user. The vulnerability is due to an error when parsing the version and encoding attributes of the XML declaration statement. An...

WellinTech Multiple Products kxClientDownload ActiveX Remote Code Execution (CVE-2013-2827)

A remote code execution vulnerability exists in WellinTech multiple products. The vulnerability exists in ClientDownload.ocx ActiveX control and is due to insufficient sanitization of ProjectURL property. A remote unauthenticated attacker can leverage this vulnerability to download and load an...

Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)

A local file include vulnerability has been reported in Zimbra Collaboration Server. The vulnerability is due to insufficient validation of user-supplied input. A remote attacker can exploit this vulnerability to retrieve sensitive information like LDAP root credentials...

Microsoft Internet Explorer Memory Corruption (MS13-059: CVE-2013-3187)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Schneider Electric Interactive Graphical SCADA System Buffer Overflow - Improved Performance (CVE-2013-0657)

An buffer overflow vulnerability has been reported in Schneider Electric's Interactive Graphical SCADA System IGSS application. The vulnerability is due to an integer underflow that leads to a stack buffer overflow when processing crafted input sent to ports 12397/TCP and 12399/TCP...

RealNetworks RealPlayer URL Parsing Stack Buffer Overflow (CVE-2012-5691)

A stack buffer overflow vulnerability exists in RealNetworks RealPlayer. Successful exploitation can result in arbitrary code execution in the context of the currently logged in user...

Portable SDK for UPnP Devices libupnp Device Service Name Stack Buffer Overflow (CVE-2012-5958)

A stack buffer overflow vulnerability exists in Intel SDK for UPnP and Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing uuid:schemas:device service name strings in the uniqueservicename function called from SSDP protocol parser.Remote unauthenticated attackers can...

Symantec Messaging Gateway Default SSH Password (CVE-2012-3579)

A design weakness vulnerability has been reported in Symantec Messaging Gateway. The vulnerability is due to hardcoded default credentials usage. A remote attacker could exploit this vulnerability by logging-in to the administration console, thus gaining partial access to the configuration of the...

IBM Lotus Quickr qp2.cab ActiveX Control Stack Buffer Overflow (CVE-2012-2176)

A stack-based buffer overflow vulnerability has been reported in IBM Lotus Quickr...

Novell ZENworks Configuration Management PreBoot Opcode Buffer Overflow (CVE-2011-3176)

A stack buffer overflow vulnerability has been reported in Novell ZENworks Configuration Management...

Protection against Black Hole Toolkit v1.2.3 Java Array Exploits (CVE-2009-1671; CVE-2012-0507)

A buffer overflow vulnerability has been reported in Sun Java SE Runtime Environment...

Novell iPrint Client GetDriverSettings Stack Buffer Overflow (CVE-2011-3173)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions. A stack buffer overflow exists in Novell iPrint Client. The vulnerabili...

Novell iManager Class Name Remote Buffer Overflow (CVE-2010-1929)

Novell iManager is a web-based administration console that provides management of many other Novell products. The iManager service itself is a Java web application running on top of the Tomcat application container. A buffer overflow vulnerability exists in Novell iManager. The vulnerability is d...

HP OpenView NNM snmpviewer.exe CGI Stack Buffer Overflow (CVE-2010-1552)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A stack buffer overflow...

Microsoft Excel SxView Record Memory Pointer Corruption (MS10-038; CVE-2010-1245)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

IBM Lotus Domino Web Access ActiveX Controls Buffer Overflow (CVE-2007-4474)

IBM Lotus Domino Web Access is a Web browser-based client platform that provides functionality similar to that of IBM Lotus Notes. With Lotus Domino Web Access, the user can send encrypted rich text e-mails, schedule meetings, manage tasks, collaborate with colleagues and so on. There exists a...

Microsoft Excel MDXTUPLE and MDXSET Records Heap Overflow (MS10-017; CVE-2010-0260; CVE-2010-0261)

Microsoft Excel is a popular spreadsheet application. Multiple heap overflow vulnerabilities have been identified in Microsoft Excel. These vulnerabilities are due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger...

BitDefender Online Scanner ActiveX Control Buffer Overflow (CVE-2007-5775)

BitDefender is an antivirus software suite developed by SOFTWIN. BitDefender website offers a free online antivirus scanner. The BitDefender online scanner installation on a Windows system includes an ActiveX control. There exists a buffer overflow vulnerability in BitDefender Online Scanner. Thi...

HP OpenView Data Protector Application Recovery Manager Buffer Overflow (CVE-2009-3844)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...

Sun Java GIF File Handling Memory Corruption (CVE-2007-0243)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java is wide...

Microsoft WordPad and Office Text Converter Memory Corruption (MS09-073; CVE-2009-2506)

WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. A remote code execution vulnerability has been reported in Microsoft WordPad and Office Word. The vulnerability is due to a memory corruption error in the...

Microsoft IIS ASP Scripts Source Code Disclosure (CVE-2005-2678)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. The server is equipped with the Active Server Pages ASP technology which is utilized for dynamic content...

Veritas Backup Exec Agent Browser Registration Request Buffer Overflow (CVE-2004-1172)

Backup Exec is a backup solution offered by VERITAS. It provides both server-side and client side components and communication mechanisms for scalability and ease of administration purposes. The client-side component is known as the Backup Exec Agent. The Backup Exec Agent Browser is a server...

Microsoft Windows Kernel Input Validation Remote Code Execution (MS09-006; CVE-2009-0081)

The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. A remote code execution vulnerability has been discovered in the Windows kernel.The vulnerability is due to an error in the Windows kernel...

Microsoft Visual Studio MaskedEdit ActiveX Control Buffer Overflow (MS08-070; CVE-2008-3704)

Microsoft Visual Studio is designed for building Windows based applications and Web solutions. A buffer overflow vulnerability has been reported in Microsoft Visual Studio. The vulnerability is due to a memory corruption error in the Visual Basic MaskedEdit ActiveX control when it fails to proper...

Update Protection against Workstation Service Buffer Overflow Vulnerability (MS06-070)

A denial of service vulnerability was detected in Microsoft Windows Workstation service. The workstation service manages the routing of system requests. The workstation service library file wkssvc.dll is used by windows when working with shared network drives and printers. A remote attacker could...

Preemptive Protection against Microsoft XML Remote Code Execution Vulnerability (MS06-071)

XMLHTTP, an ActiveX control that is included in Microsoft XML Core Services MSXML, is vulnerable to remote code execution. MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications...

Internet Explorer VML Rect Fill Method Buffer Overflow (MS06-055; CVE-2006-4868)

Microsoft Internet Explorer is the most widely used Internet browser. Microsoft Internet Explorer fails to handle Vector Markup Language VML tags. VML is a set of XML tags for drawing vector graphics. A remote attacker may trigger this vulnerability to execute arbitrary code on the target system...

Microsoft Server Service MailSlot Heap Overflow (MS06-035; CVE-2006-1314)

...

Tenda AC10 Command Injection (CVE-2022-32054)

A command injection vulnerability exists in Tenda AC10 router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Bolt CMS Arbitrary File Upload (CVE-2022-36532)

An arbitrary file upload vulnerability exists in Bolt CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle WebLogic Server Remote Code Execution (CVE-2021-2394)

A remote code execution vulnerability exists in Oracle WebLogic Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OMRON CX-One Buffer Overflow (CVE-2022-21137)

A stack-based overflow exists in OMRON CX-One CX-FLnet module. The vulnerability is due to input validation error when processing a parameter...

ICONICS GENESIS64 Remote Code Execution (CVE-2022-33318)

A remote code execution vulnerability exists in ICONICS GENESIS64. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2022-22034)

An elevation of privilege vulnerability exists in Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Emerson XWEB 300D Directory Traversal (CVE-2021-45427)

A directory traversal vulnerability exists in Emerson XWEB 300D. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Delta Electronics DIAEnergie SQL Injection (CVE-2021-38391)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to an input validation error when processing the type parameter in the AMHandler.ashx endpoint...

WordPress LearnPress Plugin Cross-Site Scripting (CVE-2021-39348)

A stored cross-site scripting vulnerability exists in LearnPress Plugin for WordPress. The vulnerability is due to insufficient sanitization of user-supplied data in Profile Settings page...

TOTOLINK Technology Router Authentication Bypass (CVE-2021-35327)

An authentication bypass vulnerability exists in TOTOLINK Technology Router. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

FlatCore CMS Remote Code Execution (CVE-2021-39608)

A remote code execution vulnerability exists in FlatCore CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle E-Business Suite Sales Offline Denial of Service (CVE-2021-2189)

An infinite loop vulnerability exists in the Sales Offline component of Oracle E-Business Suite. The vulnerability is due to improper handling of requests by the authentication component of Sales Offline...

Microsoft Scripting Engine Memory Corruption (CVE-2021-34480)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zen Cart IT-Recht Kanzlei Plugin SQL Injection (CVE-2020-6577)

An SQL injection vulnerability exists in Zen Cart IT-Recht Kanzlei Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Iteris Vantage Velocity Command Injection (CVE-2020-9020)

A command injection vulnerability exists in Iteris Vantage Velocity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...