13538 matches found
Asustor ADM Command Injection (CVE-2018-11510)
A remote command injection vulnerability exists in Asustor ADM. Successful exploitation would allow an attacker to execute arbitrary code on the target machine...
Microsoft HIDParser Elevation of Privilege (CVE-2018-8169)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0777)
A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to an Out-of-Bounds write in the JavaScript engine. A remote attacker can exploit this issue by enticing a victim to open a specially crafted web page that could cause memory corruption in a way th...
Systemd resolved dns_packet_new Heap Buffer Overflow (CVE-2017-9445)
A heap buffer overflow vulnerability exists in the dnspacketnew function of systemd-resolved. This vulnerability is due to the allocation of a heap buffer of insufficient size when handling DNS responses. A malicious DNS server can exploit this vulnerability by sending a crafted DNS response...
Microsoft Windows Eclipsedwing RPC Buffer Overflow (CVE-2008-4250)
A remote code execution vulnerability exist in Microsoft Remote Procedure Call RPC. The vulnerability is due to the way RPC service handles certain requests. The Fuzzbunch tool allows attackers to execute this exploit. An attacker who successfully exploits this vulnerability can execut arbitrary...
Microsoft Windows Uniscribe Remote Code Execution (MS16-147: CVE-2016-7274)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted ttf file...
Microsoft Windows VHDFS Driver Elevation of Privilege (MS16-138: CVE-2016-7226)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to insufficient specification for a certain flag. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Microsoft Internet Explorer NetBIOS Spoofing (MS16-063: CVE-2016-3213)
A spoofing vulnerability exists in Microsoft Internet Explorer. The root cause is that an attacker can spoof WAPD requests and force the browser to switch to local Intranet. A remote attacker can exploit this issue by sending a specially crafted meeting request...
Magento API unserialize Remote Code Execution (CVE-2016-4010)
A remote code execution vulnerability exists in the e-commerce platform Magento. The vulnerability is due to deserialization of attacker controlled objects via the checkout API. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted Web API request to the target...
Flexera FlexNet Publisher License Server Buffer Overflow (CVE-2015-8277)
Two buffer overflow vulnerabilities have been discovered in the FlexNet Publisher license server manager. These vulnerabilities are due to improper bounds checking in a custom strncpy function when handling requests received over the network. An attacker could leverage these vulnerabilities by...
PHP ZIP Archive Heap Overflow (CVE-2016-3078)
A heap overflow vulnerability exists in PHP, due to an integer overflow when reading ZIP files. A remote attacker can exploit this vulnerability by sending a crafted ZIP archive to a web application running a vulnerable version of PHP. A successful attack can result in remote code execution under...
Oracle Endeca Server createDataStore Remote Command Execution - Ver2 (CVE-2013-3763)
A command execution vulnerability exists in Oracle Endeca Server. The vulnerability is due to the controlSoapBinding web service exposing the createDataStore method which contains a flaw that allows for the injection of arbitrary commands. A remote, unauthenticated attacker could exploit this...
ISS ICQ Parsing - Ver2 (CVE-2004-0362)
There is a vulnerability within several ISS security products, including BlackICE, RealSecure, and Proventia, in the way they parse the ICQ messaging protocol. An attacker, exploiting this vulnerability, can cause a buffer overflow, resulting in the termination of a service or execution of...
Microsoft Office Excel CatSerRange Record Remote Code Execution (MS11-021) - Ver2 (CVE-2011-0978)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
WordPress Download Manager Plugin Privilege Escalation (CVE-2014-9260)
A privilege escalation vulnerability has been found in WordPress Download Manager Plugin. An authenticated remote attacker may leverage this vulnerability to gain administrative access to the vulnerable server...
Zavio IP Camera Firmware 1603 OS Command Injection - Ver2 (CVE-2013-2570)
A command injection vulnerability has been reported in Zavio F3105 and F312A IP cameras. The vulnerability is due to an input passed via the 'General.Time.NTP.Server' function, when parameter is not properly sanitized upon submission to the subC8C8 function in /opt/cgi/view/param. Successful...
VLC Media Player ABC File Parsing Buffer Overflow - Ver2 (CVE-2013-4233)
A buffer overflow vulnerability has been reported in VLC Media Player's ABC file parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Oracle Database Server Insecure User Input Stack Buffer Overflow (CVE-2013-3751)
A stack buffer overflow vulnerability has been reported in Oracle Database Server. The vulnerability is due to insufficient validation of user supplied input when parsing XML document data in a SQL/XML query. A remote, authenticated attacker could exploit this vulnerability by sending a malicious...
PoPToP PPTP Negative Read Overflow Buffer Overflow - Ver2 (CVE-2003-0213)
A buffer overflow vulnerability has been reported in Poptop Pptp Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Office PICT Filter Map Structure Memory Corruption - Ver2 (CVE-2008-3021)
A memory corruption vulnerability has been reported in Microsoft Office. The vulnerability is due to a memory corruption error when a malformed PICT file is opened by any of the affected Microsoft Office applications. Successful exploitation of this vulnerability could allow a remote attacker to...
VideoLAN VLC Media Player MMS Plugin Stack Buffer Overflow - ver 2 (CVE-2012-1775)
A stack buffer overflow vulnerability has been reported in VLC Media Player. The vulnerability is due to insufficient bounds checking in the MMS access plugin while copying a hostname into a stack buffer. A remote attacker can exploit this issue by convincing a target user to open a specially...
EMC CMCNE FileUploadController Information Disclosure (CVE-2014-2276)
An information disclosure vulnerability has been reported in EMC Connectrix Manager Converged Network Edition. The vulnerability is due to insufficient input validation in the FileUploadController servlet when processing certain HTTP requests. A remote unauthenticated attacker can exploit this...
Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)
An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...
Squid Proxy DNS Response Spoofing (CVE-2005-1519; CVE-2007-3898)
There exists a vulnerability in Squid Web Proxy Cache in the processing of DNS lookups. The flaw is caused by predictable transaction identifiers in DNS requests generated by Squid. A remote attacker may leverage this vulnerability to use spoofed DNS responses to poison the DNS cache on the targe...
WordPress Plugin AdRotate SQL Injection (CVE-2014-1854)
An SQL injection vulnerability has been reported in the AdRotate plugin for WordPress. Remote attacker can exploit this vulnerability to execute arbitrary SQL commands on the target...
Microsoft XML Core Services DTD Cross-Domain Scripting (MS08-069) - Ver2 (CVE-2008-4029)
MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...
Oracle Java FileDialog.Show Heap Buffer Overflow - Ver2 (CVE-2011-0802)
A remote code execution vulnerability has been reported in Oracle Java Runtime Environment.The vulnerability is due to insufficient validation of the selected file's default values size. A remote attacker could exploit this vulnerability by enticing an unsuspecting user to open a web page...
Microsoft Internet Explorer Use-After-Free Code Execution (CVE-2014-0322)
A use-after-free vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Multiple SSH2 Products Response Buffer Overflow - Ver2 (CVE-2002-1359)
A buffer overflow vulnerability has been reported in multiple SSH2 servers and clients. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office Embedded TIFF Image Remote Code Execution (CVE-2013-3906)
A remote code execution vulnerability has been reported in a graphic rendering library used by Microsoft Office products...
HP ProCurve Manager SNAC UpdateCertificatesServlet Code Execution (CVE-2013-4812)
A remote code execution vulnerability has been reported in HP ProCurve Manager SNAC...
HP Data Protector CRS Opcode 1091 Stack Buffer Overflow (CVE-2013-2334)
A stack buffer overflow has been reported in HP Data Protector...
Irfanview JPEG2000 jp2 Stack Buffer Overflow (CVE-2012-0897)
A buffer overflow vulnerability has been reported in Irfanview JPEG2000 v4.3.2.0 jp2 QCD parsing...
Axigen Arbitrary File Read and Delete (CVE-2012-4940)
A directory traversal vulnerability has been reported in AXIGEN Mail Server. The issue is due to the index.hsp script not properly sanitizing user input...
Mutiny FrontEnd Arbitrary File Read and Delete (CVE-2013-0136)
A directory traversal vulnerability has been reported in EditDocument servlet from the frontend on the Mutiny 5 appliance. Commands for UPLOAD, DELETE, CUT and COPY are all vulnerable to directory traversal attacks...
BigAnt Server DUPF Command Arbitrary File Upload (CVE-2012-6274)
An arbitrary file upload vulnerability exists in BigAnt Server. The vulnerability is due to lack of authentication and a directory traversal weakness in processing a DUPF command. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server...
Microsoft ASP.NET PKCS Padding Information Disclosure (MS10-070; CVE-2010-3332)
An information disclosure vulnerability has been reported in ASP.NET. This vulnerability is caused by ASP.NET providing web clients details in error messages when decrypting certain ciphertext. Successful exploitation of this vulnerability could allow the attacker to read and tamper with data. If...
Preemptive Protection against Microsoft XML Uninitialized Memory Corruption (MS12-043; CVE-2012-1889)
A remote code execution vulnerability has been reported in Microsoft XML Core Services...
Microsoft Media Player Audio Sampling Rate Memory Corruption (MS08-054; CVE-2008-2253)
A remote code execution vulnerability has been reported in Microsoft Windows Media Player 11. The vulnerability is due to a buffer overflow condition in Windows Media Player 11 that fails to properly handle specially crafted audio-only files. A remote attacker could trigger this flaw by convincin...
Interactive Data eSignal Stack Buffer Overflow (CVE-2011-3494)
A stack buffer overflow vulnerability exists in Interactive Data eSignal. The vulnerability is due to insufficient string length validation when copying input into a fixed size stack buffer in certain file types.A remote attacker may exploit this issue by enticing a target user to open a speciall...
Microsoft Windows Assembly Execution Vulnerability (MS12-005; CVE-2012-0013)
A remote code execution vulnerability has been reported in Microsoft Windows Packager...
Microsoft Windows Ancillary Driver Elevation of Privilege (MS11-046; CVE-2011-1249)
The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability exists in the Ancillary Function Driver afd.sys due...
Oracle Document Capture ActiveX Control WriteJPG Buffer Overflow (CVE-2010-3599)
Oracle Document Capture supplies document scanning and indexing capabilities. It installs an ActiveX control NCSECWLib on web clients. A buffer overflow vulnerability has been reported in the NCSECWLib ActiveX control included with Oracle Document Capture. The vulnerability is due to improper...
Nullsoft Winamp MIDI Timestamp Stack Buffer Overflow (CVE-2010-4370)
Winamp is a popular multimedia player, produced by Nullsoft, which is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files, as well as numerous other formats. Among the audio files supported by Winamp are MIDI files and MUS files...
Microsoft Graphics Filters TIFF Image Converter Buffer Overflow (MS10-105; CVE-2010-3949; CVE-2010-3950)
Tagged Image File Format TIFF is a container format for storing images, including photographs and line art. A buffer overflow vulnerability has been discovered in the way that Microsoft Office parses specially crafted TIFF image files. The vulnerability is due to an error in Microsoft Office TIFF...
Microsoft IIS Directory Authentication Bypass (MS10-065; CVE-2010-1899; CVE-2010-2731)
IIS is a collection of Internet services packaged with several versions of the Windows operating system. An elevation of privilege vulnerability has been reported in Microsoft Internet Information Services IIS. The vulnerability is due to the way IIS parses specially crafted URLs. An attacker may...
Novell iManager eDirectory Plugin Schema Buffer Overflow (CVE-2009-4486)
A stack buffer overflow vulnerability exists in the Novell iManager eDirectory plugin. The vulnerability is due to improper validation of user input by a sub-application. A remote, authenticated attacker can exploit this vulnerability by sending specially crafted parameters to the application...
Microsoft Windows RRAS Memory Corruption (CVE-2006-2370)
Microsoft Remote Access Connection Manager service, RASMAN, provides the functionality to remotely configure and manage various services. One such service that can be managed remotely is the Routing and Remote Access Service, RRAS. Routing and Remote Access Service makes it possible for a compute...
Adobe Photoshop CS4 ABR File Processing Buffer Overflow (APSB10-13; CVE-2010-1296)
Adobe Photoshop CS4 is a graphics editing program that features a 3D engine. A buffer overflow vulnerability has been reported in Adobe Photoshop CS4. The vulnerability is due to an error in Adobe Photoshop CS4 that fails to properly handle malformed ABR files. By convincing a user to open a...
Sun Java Runtime Environment Abstract Windowing Toolkit Memory Corruption (CVE-2008-5359)
There exists a buffer overflow vulnerability in Sun Java Runtime Environment JRE. The vulnerability is caused due to improper checking of parameters passed to natively implemented class methods. A remote attacker may leverage this vulnerability to inject and execute arbitrary code on the target...