13538 matches found
Microsoft DLL Planting Remote Code Execution (MS15-020; CVE-2015-0096)
A remote code execution vulnerability has been reported in Microsoft Windows . The vulnerability is due to an error in the way Microsoft Windows improperly handles the loading of DLL files. A remote attacker can exploit this issue by enticing a user to open a specially crafted file...
Joomla Component com_prayercenter SQL Injection (CVE-2008-6429)
An SQL injection vulnerability has been reported in Mike Leeper Com Prayercenter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Oracle Event Processing FileUploadServlet Directory Traversal (CVE-2014-2424)
A code execution vulnerability has been reported in Oracle Event Processing. The vulnerability is due to a directory traversal within the FileUploadServlet servlet. A remote unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request...
WellinTech KingSCADA kxNetDispose.dll Stack Buffer Overflow (CVE-2014-0787)
A stack buffer overflow vulnerability has been reported in WellinTech KingSCADA. The vulnerability is due to insufficient validation on the size of the data. A remote unauthenticated attacker could exploit this vulnerability by sending a malicious packet to the KingSCADA server...
NAS4Free exec.php Arbitrary Remote Code Execution (CVE-2013-3631)
A code execution vulnerability has been reported in NAS4Free. The vulnerability is due to "Advanced | Execute Command" feature that allows remote authenticated users to execute arbitrary PHP code via a request to exec.php. A remote unauthenticated attacker can exploit this vulnerability by execut...
Red Hat JBoss Seam InterfaceGenerator Information Disclosure (CVE-2013-6448)
An information disclosure vulnerability exists in Red Hat JBoss Seam Framework. This is due to a design flaw in the InterfaceGenerator handler that allows it to expose details of all classes on the server's classpath. A remote unauthenticated attacker may exploit this vulnerability on a web...
KingView ActiveX Control Directory Traversal - Ver2 (CVE-2013-6128)
A directory traversal vulnerability has been reported in Wellintech Kingview. Successful exploitation of this vulnerability would allow a remote attacker to list directories, create arbitrary files and subsequently execute arbitrary code on the affected system...
RealNetworks RealPlayer RMP File Stack Buffer Overflow (CVE-2013-6877)
A stack buffer overflow exists in RealNetworks RealPlayer. Successful exploitation could result in arbitrary code execution in the context of the currently logged in user. The vulnerability is due to an error when parsing the version and encoding attributes of the XML declaration statement. An...
phpBB viewtopic.php URL Decoding Code Execution - ver 2 (CVE-2004-1315)
A code injection and execution vulnerability has been reported in phpBB. The vulnerability is due to lack of input validation on the highlight parameter supplied to viewtopic.php. A remote attacker can exploit this issue by injecting malicious SQL code to the target server. Successful exploitatio...
System V TTYPROMPT Buffer Overflow - Ver2 (CVE-2001-0797)
A buffer overflow vulnerability has been reported in various System V based operating systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)
A local file include vulnerability has been reported in Zimbra Collaboration Server. The vulnerability is due to insufficient validation of user-supplied input. A remote attacker can exploit this vulnerability to retrieve sensitive information like LDAP root credentials...
Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution (CVE-2011-3322)
A remote overflow vulnerability has been reported in Procyon Core Server HMI service...
Schneider Electric Interactive Graphical SCADA System Buffer Overflow - Improved Performance (CVE-2013-0657)
An buffer overflow vulnerability has been reported in Schneider Electric's Interactive Graphical SCADA System IGSS application. The vulnerability is due to an integer underflow that leads to a stack buffer overflow when processing crafted input sent to ports 12397/TCP and 12399/TCP...
Csound Hetro File Handling Stack Buffer Overflow (CVE-2012-0270)
A stack buffer overflow vulnerability has been reported in Csound. The vulnerability is due to the improper validation of specially crafted hetro files. A remote attacker can exploit this issue by enticing the victim to accept and open a specially crafted file. Successful exploitation would resul...
EMC NetWorker nsrd Format String Remote Code Execution (CVE-2012-2288)
A remote code execution vulnerability has been reported in EMC NetWorker...
Microsoft Windows Common Controls Remote Code Execution (MS12-060; CVE-2012-1856)
A remote code execution vulnerability has been reported in the Windows common controls...
Novell ZENworks Configuration Management PreBoot Opcode Buffer Overflow (CVE-2011-3176)
A stack buffer overflow vulnerability has been reported in Novell ZENworks Configuration Management...
LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal (CVE-2012-1195)
A directory traversal vulnerability has been reported in LANDesk Lenovo ThinkManagement Suite...
HP OpenView Network Node Manager ov.dll Buffer Overflow (CVE-2011-3167)
A stack-based buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM...
Microsoft Embedded OpenType EOT Font Integer Overflow (MS10-076; CVE-2010-1883)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an integer overflow in the Microsoft Windows EOT component, when parsing certain tables within specially crafted files and content containing embedded fonts. A remote attacker may exploit thi...
Tom Sawyer ActiveX Control Memory Corruption (CVE-2011-2217)
A code execution vulnerability has been reported in Tom Sawyer. The vulnerability is due to an error while instantiating the ActiveX control in a browser. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation of this...
Preemptive Protection against Multiple Microsoft Forefront UAG Cross-Site Scripting Vulnerabilities (MS10-089)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft Forefront Unified Access Gateway UAG. Microsoft Forefront UAG is a virtual private networking solution that provides secure remote access to corporate networks for remote employees and business partners. It incorporates...
Apache HTTP Server auth_ldap Logging Function Format String (CVE-2005-3656; CVE-2006-0150)
There exists a format string vulnerability in the authldap module used with Apache HTTP server. The vulnerability is a result of the failure to properly verify string arguments passed to a logging function, resulting in a memory corruption condition. A remote attacker can exploit this vulnerabili...
ClamAV UPX File Handling Heap Overflow (CVE-2006-4018)
ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several archive formats in order to scan their internal items for viruses. One of such archive formats is the UPX Ultimate Packer for eXecutables fi...
Adobe RoboHelp Server Arbitrary File Upload and Execute (CVE-2009-3068)
Adobe RoboHelp Server is a server-based Help solution that provides real-time end-user feedback on help and knowledge bases. It gathers and logs data about what questions users ask while searching content and how users navigate through topics. The product consists of an administrative web interfa...
Internet Explorer iepeers.dll Remote Code Execution (CVE-2010-0806)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer handles specific attributes. To trigger this issue, an attacker may create a maliciou...
BitDefender Online Scanner ActiveX Control Buffer Overflow (CVE-2007-5775)
BitDefender is an antivirus software suite developed by SOFTWIN. BitDefender website offers a free online antivirus scanner. The BitDefender online scanner installation on a Windows system includes an ActiveX control. There exists a buffer overflow vulnerability in BitDefender Online Scanner. Thi...
Unisys Business Information Server Stack Buffer Overflow (CVE-2009-1628)
The Unisys Business Information Server is a business information management solution that provides data access, analysis and reporting in an open, enterprise-wide computing environment. Business Information Server transforms corporate data into information that is made available throughout the...
Ethereal Netflow Dissector Buffer Overflow (CVE-2004-0176)
There is a buffer overflow in the NetFlow dissector within Ethereal, a program that has the ability to decode packets containing NetFlow packet data as per Cisco's specification. A simple exploit of this vulnerability, where the buffer is overrun with arbitrary data, will result in the terminatio...
Internet Explorer HTML Component Handling Remote Code Execution (MS09-054; CVE-2009-2529)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles argument validation of a variant in specific situations. The vulnerability occurs when Internet Explorer validates arguments incorrectly und...
Internet Explorer Uninitialized Object Memory Corruption (MS09-054; CVE-2009-2530)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in Internet Explorer. When Internet Explorer attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way that an attacker coul...
Internet Explorer HTML Objects Memory Corruption (MS09-034; CVE-2009-1918)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles table operations in specific situations. When Internet Explorer handles table operations in specific situations, it may corrupt memory in su...
Internet Explorer Uninitialized Memory Corruption (MS09-034; CVE-2009-1919)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way Internet Explorer accesses an object that has been deleted. When Internet Explorer attempts to access an object that has been deleted, it may corrupt memory in such a way...
Preemptive Protection against Apple QuickTime PICT Image paintPoly Parsing Heap Buffer Overflow
A buffer overflow vulnerability was reported in Apple QuickTime, a multimedia player that supports a wide range of media formats. Apple QuickTime fails to process crafted PICT images. Remote attackers may exploit this vulnerability by persuading a target user to open a specially crafted PICT file...
Microsoft Windows MHTML URL Parsing Information Disclosure (MS08-048; CVE-2008-1448)
MHTML MIME Encapsulation of Aggregate HTML is an Internet standard that defines the MIME structure that is used to wrap HTML content. An information disclosure vulnerability has been reported in Outlook Express and Windows Mail due to a flaw in the MHTML protocol. The vulnerability is caused when...
CA Products ActiveX Control ListCtrl AddColumn Buffer Overflow (CVE-2008-1472)
Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A buffer overflow vulnerability was reported in CA multiple products. The vulnerability is due to boundary errors in the CA products ActiveX control while handling crafted...
Update Protection against Microsoft Internet Explorer FTP Responses Remote Code Execution Vulnerability (MS07-016)
A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer IE processes certain responses from FTP servers. The File Transfer Protocol FTP is used to connect computers over the Internet enabling file transferring between their users. An attacker can exploit the...
Microsoft Netware Client Service Memory Corruption (MS06-066; CVE-2006-4688)
Client Services for NetWare CSNW provides a Windows workstation with access to NetWare file, print, and directory services. This gives users the ability to store and retrieve documents from NetWare file servers, print to NetWare print queues, and log on to Novell Directory Services NDS. By...
Microsoft Visual Studio WMI Object Code Execution (MS06-073; CVE-2006-4704)
A remote code execution vulnerability exists in Microsoft Visual Studio 2005. Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications,...
Microsoft Server Service MailSlot Heap Overflow (MS06-035; CVE-2006-1314)
...
Jenkins Active Choices Plugin Cross-Site Scripting (CVE-2021-21699)
A stored cross-site scripting vulnerability exists in Jenkins Active Choices Plugin. This vulnerability is due to insufficient validation of parameter name of reactive parameters and dynamic reference parameters...
Seacms Remote Code Execution (CVE-2022-27336)
A remote code execution vulnerability exists in Seacms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Tenda AC18 Router Command Injection (CVE-2022-31446)
A command injection vulnerability exists in Tenda AC18 Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Windows Graphics Component Elevation of Privilege (CVE-2022-22034)
An elevation of privilege vulnerability exists in Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
TOTOLink A3100R Command Injection (CVE-2022-25077)
A command injection vulnerability exists in TOTOLink A3100R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Draytek Vigor Command Injection (CVE-2021-43118)
A command injection vulnerability exists in Draytek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
D-Link DIR-610 Remote Code Execution (CVE-2020-9377)
A remote code execution vulnerability exists in D-Link DIR-610. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Duplicate Post Plugin SQL Injection (CVE-2021-43408)
An SQL injection vulnerability exists in WordPress Duplicate Post Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Scripting Engine Memory Corruption (CVE-2021-34480)
A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
EPrints Arbitrary File Read (CVE-2021-3342)
An Arbitrary File Read vulnerability exists in EPrints. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary web script into the effected system...