13538 matches found
Microsoft GDI+ EMF Image Processing Integer Overflow (MS11-029; CVE-2011-0041)
GDI+ is a graphics device interface that provides two-dimensional vector graphics, imaging, and typography to applications and programmers. An integer overflow vulnerability has been discovered in the way that GDI+ handles integer calculations. The vulnerability is caused by a memory corruption...
Cisco Security Agent Management Center Code Execution (CVE-2011-0364)
CSA is an endpoint host based security solution that combines zero-update attack protection, data loss prevention, and signature-based antivirus. It defends servers and desktops against new attacks, and enforces acceptable-use and compliance policies within a simple management infrastructure. An...
NetSupport Manager Client Remote Handshake Messages Buffer Overflow (CVE-2011-0404)
NetSupport Manager is a remote PC support and desktop management system which functions on many platforms. It is considered as a replacement for typical remote desktop applications such as Windows Terminal Service. A buffer overflow vulnerability has been reported in NetSupport Manager client...
Symantec Antivirus Intel Alert Handler Service Denial of Service (CVE-2010-0111)
The Symantec System Center includes an optional component called the Alert Management System AMS2. The AMS2 starts multiple services on the system that include an alert handler service from Intel Corporation called the AMS2 Handler Manager Service HNDLRSVC.EXE. A denial of service vulnerability h...
Microsoft Data Access Components CacheSize Memory Corruption (MS11-002; CVE-2011-0027)
Microsoft Data Access Components MDAC is a collection of components that make it easy for programs to access databases and then to manipulate the data within them. MDAC provides a consolidated set of functions for working with different kinds of data sources in a consistent manner The vulnerabili...
Internet Explorer toStaticHTML Information Disclosure (MS10-035; CVE-2010-1257)
An information disclosure vulnerability has been reported in Internet Explorer. The vulnerability is due to the way IInternet Explorer handles content using specific strings when sanitizing HTML. To trigger this issue, an attacker may create a malicious web page that will cause Internet Explorer ...
Preemptive Protection against IBM Informix Dynamic Server librpc.dll Multiple Buffer Overflows
Multiple buffer overflow vulnerabilities have been reported in IBM's Informix Dynamic Server. The vulnerabilities are due to insufficient validation of user inputs during authentication by the RPC protocol parsing library, librpc.dll. This library is used by the Portmapper service portmap.exe whi...
Internet Explorer Response Redirect Information Disclosure (CVE-2010-0255)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer that fails to prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access...
Novell iPrint Client ienipp.ocx volatile-date-time Parsing Buffer Overflow (CVE-2009-1569)
Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from a web browser. Novell iPrint Client is bundled with a ActiveX control that implements various functions. A buffer overflow vulnerability exists in Novell iPrint Client. The...
Microsoft IIS Filename Extension Parsing Security Bypass (CVE-2009-4444)
A security bypass vulnerability has been discovered in Microsoft Internet Information Services IIS. The vulnerability is due to an error in the IIS service that incorrectly parses filenames that contain a semicolon character when determining the MIME type based on the filename extension. An...
Update Protection against IBM Tivoli Storage Manager Client CAD Service Buffer Overflow
A buffer overflow vulnerability exists in IBM Tivoli Storage Manager Client software, a backup designed to protect data from failures and other errors by storing backups and archiving data. The vulnerability is due to a boundary error in the Client Acceptor Daemon CAD service while processing a...
SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)
SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...
Microsoft Indexing Service ActiveX Memory Corruption (MS09-057; CVE-2009-2507)
The Microsoft Windows Indexing Service is a base service that extracts content from files and constructs an indexed catalog to facilitate efficient and rapid searching. A remote code execution vulnerability has been reported in the Microsoft Indexing Service. The vulnerability is caused by an...
Microsoft ATL Multiple ActiveX Remote Code Executions (MS09-037; CVE-2008-0020; CVE-2009-2493; CVE-2009-2494)
The Active Template Library ATL is a set of template-based C++ classes that simplify the programming of Component Object Model COM objects. Multiple remote code execution vulnerabilities have been reported in the Microsoft ATL. The vulnerabilities are due to an error in the Load method of the...
Security Best Practice: Protect Yourself against DNS Cache Poisoning
DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged between hosts on the network. By poisoning a DNS server, a remote attacker could, f...
Novell NetMail IMAP Verb Literal Heap Overflow (CVE-2006-6424)
...
Preemptive Protection against Microsoft XML Remote Code Execution Vulnerability (MS06-071)
XMLHTTP, an ActiveX control that is included in Microsoft XML Core Services MSXML, is vulnerable to remote code execution. MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications...
Update Protection against Multiple PHP-based Vulnerabilities
ADOdb is a database abstraction library for PHP. A vulnerability was detected in ADOdb due to the presence pf an insecure ADOdb script that can be exploited by remote attackers to execute malicious PHP commands on the target system. The 'Defacing Tool 2.0 by r3v3ng4ns' is a suite of php based...
Oracle E-Business Suite Sales Offline Denial of Service (CVE-2021-2190)
A denial of service vulnerability exists in the Sales Offline component of Oracle E-Business Suite. The vulnerability is due to improper handling of requests by the authentication component of Sales Offline...
Horde Groupware Command Injection (CVE-2017-7413)
A command injection vulnerability exists in Horde Groupware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
FatPipe Multiple Products Unrestricted File Upload (CVE-2021-27860)
An unrestricted file upload vulnerability exists in FatPipe Multiple Products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Delta Electronics DIAEnergie SQL Injection (CVE-2021-32983)
An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing keyword parameter in HandlerCFG.ashx endpoint...
Sumavision Enhanced Multimedia Router Cross Site Request Forgery (CVE-2020-10181)
A cross site request forgery vulnerability exists in Sumavision Enhanced Multimedia Router. Successful exploitation of this vulnerability can result in the execution of arbitrary code on the affected system...
Wuzhi CMS SQL Injection (CVE-2020-20122)
An SQL injection vulnerability exists in Wuzhi CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WordPress Support Board Plugin SQL Injection (CVE-2021-24741)
An SQL injection vulnerability exists in Support Board WordPress plugin before 3.3.4. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Aruba Networks ClearPass Policy Manager Remote Code Execution (CVE-2020-7115)
A remote code execution vulnerability exists in Aruba Networks ClearPass Policy Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Artifact Repository Parameter Plugin Cross-Site Scripting (CVE-2021-21622)
A stored cross-site scripting vulnerability exists in Jenkins Artifact Repository Parameter plugin. This vulnerability is due to insufficient validation of the name and description parameters in the ArtifactRepoParamDefinition class...
Netgear Smart WiFi Router Authentication Bypass (CVE-2019-17137)
An authentication bypass vulnerability exists in Netgear Smart WiFi Router. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Genivia gSOAP Buffer Overflow (CVE-2017-9765)
A buffer overflow vulnerability exists in Genivia Gsoap. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft SharePoint Server Remote Code Execution (CVE-2020-16951)
A remote code execution vulnerability exists in Microsoft SharePoint server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trend Micro IMSVA External Entity Injection (CVE-2020-27017)
An XXE vulnerability exists in Trend Micro InterScan Messaging Virtual Appliance. The vulnerability is due to insufficient validation of XML data in the Java class PolicyWSAction...
Trend Micro InterScan Web Security Virtual Appliance Stack Overflow (CVE-2020-28578; CVE-2020-28579)
A stack overflow vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Cayin CMS Command Injection (CVE-2020-7357)
A command injection vulnerability exists in Cayin CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CutePHP Cutenews Remote Code Execution (CVE-2019-11447)
A remote code execution vulnerability exists in CutePHP CuteNews. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress SeedProd Plugin Persistent Cross-Site Scripting (CVE-2020-15038)
A persistent cross site scripting vulnerability exists in WordPress SeedProd Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
D-Link DIR-859 Remote Code Execution (CVE-2019-20215)
A remote code execution vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
SonicWall SMA100 Directory Traversal (CVE-2019-7483)
A directory traversal vulnerability exists in SonicWall SMA100 system. Successful exploitation of this vulnerability could lead to disclosure of file contents accessible by the unauthenticated user...
Advantech WebAccess Buffer Overflow (CVE-2019-10991)
A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within giffconv.exe. A remote, unauthenticated attacker could exploit this vulnerability by sending a...
Advantech WebAccess SCADA Policy Bypass (CVE-2019-13552)
A policy bypass vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow the disclosure of sensitive information...
VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)
A heap buffer overflow vulnerability exists in OpenSLP. The vulnerability is due to improperly checking the bounds of a buffer before copying data to it. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to OpenSLP service on port 427...
D-Link DIR-859 Remote Code Execution (CVE-2019-17621; CVE-2022-36756; CVE-2022-37053)
A remote code execution vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Broadcom CA Privileged Access Manager Remote Command Execution (CVE-2018-9021; CVE-2018-9022)
A remote code execution vulnerability exists in Broadcom CA Privileged Access Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
OMRON CX-One CX-Protocol CMessage Type Confusion (CVE-2018-19027)
A type confusion vulnerability exists in OMRON CX-One CX-Protocol. This vulnerability occurs due to improper parsing of the project file...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1307)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1141)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1062)
...
Microsoft splwow64 Elevation of Privilege (CVE-2019-0880)
...
Microsoft Windows User Profile Service Elevation of Privilege (CVE-2019-0986)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Sierra Wireless AirLink Command Injection (CVE-2018-4061)
A command injection vulnerability exists in Sierra Wireless AirLink. An authenticated attacker can send A specially crafted HTTP request to the affected target host and trigger arbitrary command execution...
NTPsec ntpd ctl_getitem Out of Bounds Read (CVE-2019-6443)
An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the length of a message in a NTP packet. A remote unauthenticated user can exploit this vulnerability by sending a crafted packet to the target server...