13538 matches found
AirLink101 SkyIPCam Command Injection (CVE-2015-2280)
A command execution vulnerability exists in Airlink101 Skyipcam1620W Wireless N Mpeg4Gpp Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Foxit Reader JavaScript XFA Use After Free (CVE-2018-3850)
A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed JavaScript XML Forms Architecture objects...
Flexera FlexNet Publisher Buffer Overflow - Ver2 (CVE-2015-8277)
A buffer overflow vulnerability exists in FlexNet Publisher License Server. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows EOT Font Engine Information Disclosure (CVE-2018-0760)
An information disclosure vulnerability has been reported in the EOT component of Microsoft Windows operating systems. The vulnerability is due to improper handling of objects in the Windows EOT Font Engine. A remote attacker could exploit this vulnerability by enticing a user to open specially...
Microsoft Windows Desktop Bridge Elevation of Privilege (CVE-2018-0880)
A vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Edge Out Of Bounds Read Information Disclosure (CVE-2018-0767)
An out of bounds read information disclosure vulnerability exists within Microsoft Edge. This is due to the way Microsoft Edge handles array segments in certain Javascript methods. A successful attack could lead to stolen information...
Microsoft Malware Protection Engine VFS API Remote Code Execution (CVE-2017-8558)
A memory corruption vulnerability has been reported in Microsoft Malware Protection Engine. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file. A successful exploitation could lead to arbitrary code execution...
VMware vSphere Data Protection Remote Code Execution (CVE-2017-4914)
Multiple vulnerabilities have been reported in VMware vSphere Data Protection. The vulnerabilities are due to improper Java deserialization and use of reversible encryption. A remote attacker could exploit one of the vulnerabilities by sending specially crafted data to the targeted server, which...
Joomla Core HTML Attributes Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7986)
A privilege escalation vulnerability exists in Joomla Core. Unauthorized remote attackers may leverage this vulnerability to gain administrative access to the vulnerable server...
Microsoft Windows Uniscribe Remote Code Execution (MS16-147: CVE-2016-7274)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted ttf file...
WebNMS Framework Server Arbitrary File Upload (CVE-2016-6600)
An Arbitrary File Upload vulnerability exists in WebNMS Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3304)
A remote code execution vulnerability exists in Microsoft Graphics Component. The vulnerability is due to the way Microsoft Windows improperly handles specially crafted EMF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted EMF files...
Internet Explorer Malformed IFRAME Buffer Overflow - ver 2 (CVE-2004-1050)
Internet Explorer IE is a popular web browser developed by Microsoft corporation. A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is in the way Microsoft Internet Explorer parses certain parameters of an IFRAME tag. An attacker can exploit this...
Advantech WebAccess SCADA Dashboard Arbitrary File Upload (CVE-2016-0854)
An arbitrary file upload vulnerability has been reported in the Dashboard component of Advantech WebAccess. The vulnerability is due to insufficient input validation within the uploadImageCommon, uploadFile or uploadBannerImage methods in the UploadAjaxAction script. A remote, unauthenticated...
Microsoft Scripting Engine Memory Corruption (MS15-124: CVE-2015-6136)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft Internet Explorer Scripting Engine Information Disclosure (MS15-124: CVE-2015-6135)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way VBScript engine manipulates BSTR objects. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Tembria Server Monitor Denial of Service (CVE-2010-1316)
A buffer overflow vulnerability has been reported in Tembria Server Monitor. The vulnerability is due to unknown function of the file index.asp. The manipulation with an unknown input leads to a buffer overflow vulnerability...
CCProxy Telnet Ping Hostname Buffer Overflow - Ver2 (CVE-2004-2416)
A buffer overflow vulnerability has been reported in Youngzsoft Ccproxy. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows EMF Processing Remote Code Execution (MS15-035; CVE-2015-1645)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly processes specially crafted Enhanced Metafile EMF image format files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted EMF...
SOAPUI Remote Code Execution - Ver2 (CVE-2014-1202)
A code execution vulnerability has been reported in Eviware SoapUI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Easing Slider Plugin Cross-Site Request Forgery (CVE-2015-1436)
A cross-site request forgery CSRF vulnerability has been reported in WordPress Easing Slider Plugin. An attacker could exploit this vulnerability by convincing the user to follow a malicious link or visit an attacker-controlled website...
InterNetNews Control Message Handling Buffer Overflow - Ver2 (CVE-2004-0045)
The InterNetNews package INN is a complete Usenet system. It includes innd, an NNTP server, and nnrpd, a newsreading server. A vulnerability exists in the NNTP server component of InterNetNews INN, which can be exploited to compromise a vulnerable system. The vulnerability is caused due to a...
Oracle Event Processing FileUploadServlet Directory Traversal (CVE-2014-2424)
A code execution vulnerability has been reported in Oracle Event Processing. The vulnerability is due to a directory traversal within the FileUploadServlet servlet. A remote unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request...
NAS4Free exec.php Arbitrary Remote Code Execution (CVE-2013-3631)
A code execution vulnerability has been reported in NAS4Free. The vulnerability is due to "Advanced | Execute Command" feature that allows remote authenticated users to execute arbitrary PHP code via a request to exec.php. A remote unauthenticated attacker can exploit this vulnerability by execut...
Sophos Web Appliance change_password Admin Password Privilege Escalation (CVE-2014-2849)
A privilege escalation vulnerability has been reported in Sophos Web Appliance. The vulnerability is due to errors in a changepassword request when handling user input. A remote authenticated attacker could exploit this vulnerability by placing specially crafted data in a changepassword request...
Microsoft Word Malformed Data Structures Memory Corruption - Ver2 (CVE-2006-6456)
A memory corruption vulnerability has been reported in Microsoft Office Word. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Buffer Overrun in ToolbarDef Buffer Overflow - Ver2 (CVE-2011-0097)
A buffer overflow vulnerability has been reported in Microsoft Excel. An attacker could exploit this vulnerability a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow. Successful exploitation of this vulnerability could allow a remote attacker to execute...
Microsoft Visual Basic FlexGrid ActiveX Control Rows Parameter Memory Corruption - Ver2 (CVE-2008-4254)
A memory corruption vulnerability has been reported in Microsoft Visual Basic. An attacker could exploit this vulnerability crafted Rows and Cols properties to the ExpandAll and CollapseAll methods, related to access of incorrectly initialized objects and corruption of the system state. Successfu...
KingView ActiveX Control Directory Traversal - Ver2 (CVE-2013-6128)
A directory traversal vulnerability has been reported in Wellintech Kingview. Successful exploitation of this vulnerability would allow a remote attacker to list directories, create arbitrary files and subsequently execute arbitrary code on the affected system...
Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0307)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
phpBB viewtopic.php URL Decoding Code Execution - ver 2 (CVE-2004-1315)
A code injection and execution vulnerability has been reported in phpBB. The vulnerability is due to lack of input validation on the highlight parameter supplied to viewtopic.php. A remote attacker can exploit this issue by injecting malicious SQL code to the target server. Successful exploitatio...
System V TTYPROMPT Buffer Overflow - Ver2 (CVE-2001-0797)
A buffer overflow vulnerability has been reported in various System V based operating systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)
A local file include vulnerability has been reported in Zimbra Collaboration Server. The vulnerability is due to insufficient validation of user-supplied input. A remote attacker can exploit this vulnerability to retrieve sensitive information like LDAP root credentials...
Microsoft Office Embedded TIFF Image Remote Code Execution (CVE-2013-3906)
A remote code execution vulnerability has been reported in a graphic rendering library used by Microsoft Office products...
Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution (CVE-2011-3322)
A remote overflow vulnerability has been reported in Procyon Core Server HMI service...
Microsoft RPC Services Path Canonicalization Remote Code Execution (CVE-2008-4250)
A remote code execution vulnerability has been reported in applications based on the SMB protocol...
3S Smart Software Solutions CoDeSys Gateway Server Directory Traversal (CVE-2012-4705)
Multiple directory traversal vulnerabilities have been reported in 3S CoDeSys Gateway Server...
Microsoft .NET XML Digital Signature Spoofing (MS13-040; CVE-2013-1336)
A spoofing vulnerability has been reported when the Microsoft .NET Framework fails to properly validate the signature of specially crafted XML files. Successful exploitation would allow an attacker to modify the contents of an XML file without invalidating the signature associated with the file...
Schneider Electric Interactive Graphical SCADA System Buffer Overflow - Improved Performance (CVE-2013-0657)
An buffer overflow vulnerability has been reported in Schneider Electric's Interactive Graphical SCADA System IGSS application. The vulnerability is due to an integer underflow that leads to a stack buffer overflow when processing crafted input sent to ports 12397/TCP and 12399/TCP...
EMC NetWorker nsrd Format String Remote Code Execution (CVE-2012-2288)
A remote code execution vulnerability has been reported in EMC NetWorker...
IBM Lotus Notes URL Handler Command Execution (CVE-2012-2174)
A command execution vulnerability has been reported in IBM Lotus Notes...
Gimp Script-Fu Server Buffer Overflow (CVE-2012-2763)
A buffer overflow vulnerability has been reported in the Script-Fu scheme interpreter server component of GIMP...
Microsoft Windows Common Controls Remote Code Execution (MS12-060; CVE-2012-1856)
A remote code execution vulnerability has been reported in the Windows common controls...
LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal (CVE-2012-1195)
A directory traversal vulnerability has been reported in LANDesk Lenovo ThinkManagement Suite...
Microsoft Embedded OpenType EOT Font Integer Overflow (MS10-076; CVE-2010-1883)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an integer overflow in the Microsoft Windows EOT component, when parsing certain tables within specially crafted files and content containing embedded fonts. A remote attacker may exploit thi...
Tom Sawyer ActiveX Control Memory Corruption (CVE-2011-2217)
A code execution vulnerability has been reported in Tom Sawyer. The vulnerability is due to an error while instantiating the ActiveX control in a browser. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation of this...
Novell iPrint Client GetDriverSettings Stack Buffer Overflow (CVE-2011-3173)
Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions. A stack buffer overflow exists in Novell iPrint Client. The vulnerabili...
Preemptive Protection against Multiple Microsoft Forefront UAG Cross-Site Scripting Vulnerabilities (MS10-089)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft Forefront Unified Access Gateway UAG. Microsoft Forefront UAG is a virtual private networking solution that provides secure remote access to corporate networks for remote employees and business partners. It incorporates...
Apache HTTP Server auth_ldap Logging Function Format String (CVE-2005-3656; CVE-2006-0150)
There exists a format string vulnerability in the authldap module used with Apache HTTP server. The vulnerability is a result of the failure to properly verify string arguments passed to a logging function, resulting in a memory corruption condition. A remote attacker can exploit this vulnerabili...
ClamAV UPX File Handling Heap Overflow (CVE-2006-4018)
ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several archive formats in order to scan their internal items for viruses. One of such archive formats is the UPX Ultimate Packer for eXecutables fi...