13538 matches found
Ruby on Rails JSON Processor YAML Deserialization Code Execution (CVE-2013-0333)
A code execution vulnerability has been reported in Ruby on Rails. The vulnerability is due to an input validation error when JSON Processor deserializes YAML. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary code within the context of the underlying web serve...
Novell ZENworks LaunchHelp.dll ActiveX Control Code Execution (CVE-2011-2657)
A remote code execution vulnerability has been reported in Novell ZENworks ActiveX control...
Microsoft Office Web Components Arbitrary Code Execution (CVE-2009-1136)
A code execution vulnerability has been reported in Microsoft office web components. The vulnerability is due to insecure design of certain methods within ActiveX controls. A remote attacker may exploit this vulnerability by enticing a target user to open a malicious web-page. Successful...
CA Total Defense Suite UNCWS Multiple Report Stored Procedure SQL Injections (CVE-2011-1653)
CA Total Defense combines CA Anti-Virus, CA Anti-Spyware, CA Gateway Security and CA Host-Based Intrusion Prevention System. The unified network control UNC offers network access protection by validating endpoints requesting network access. Multiple SQL Injection vulnerabilities have been reporte...
Microsoft Windows Common Control Library Heap Buffer Overflow (MS10-081; CVE-2010-2746)
The common controls are a set of windows that are implemented by the common control library, Comctl32.dll, which is a DLL included with the Windows operating system. Like other control windows, a common control is a child window that an application uses in conjunction with another window to enabl...
Preemptive Protection against WordPress cforms Plugin Cross-Site Scripting (XSS) Vulnerability
A cross-site scripting XSS vulnerability has been reported in the cforms plugin for WordPress. cforms is a highly customizable, flexible and powerful form builder plugin, covering a variety of use cases and features from attachments to multi-form management. A remote attacker may exploit this...
Workaround for Microsoft Embedded OpenType Font Engine Integer Overflow Vulnerability (MS10-076)
A remote code execution vulnerability has been reported in the way Microsoft Windows Embedded OpenType EOT font technology parses certain tables in specially crafted embedded fonts. Embedded OpenType EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploi...
Novell iManager Tree Name Denial of Service (CVE-2010-1930)
Novell iManager is a web-based administration console that provides management of many other Novell products. The iManager service itself is a Java web application running on top of the Tomcat application container. A denial of service vulnerability exists in Novell iManager. The vulnerability is...
Microsoft Visual Basic Document Properties Buffer Overrun (MS06-047; CVE-2006-3649)
Microsoft Visual Basic for Applications VBA is an implementation of Microsoft's Visual Basic which is built into all Microsoft Office applications, as well as some other Microsoft applications, such as Microsoft Visio and Microsoft Works Suite. Visual Basic VB is an event driven programming and...
Internet Explorer HTML Tag Memory Corruption (MS06-013; CVE-2006-1188)
Microsoft Internet Explorer IE is the most widely used web browser application today. The browser is capable of processing HTML, scripting languages, and interpretation of various other popular Internet specifications. There are numerous versions of the HTML standard that are interpreted by the...
Macromedia JRun 4 mod_jrun Buffer Overflow (CVE-2004-0646)
Macromedia JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including Apache. Apache can communicate with the JRun...
Microsoft PowerPoint File Path Handling Buffer Overflow (MS10-004; CVE-2010-0029)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint when it tries to copy an overly long file name to a...
Microsoft Windows GDIplus PNG Chunk Processing Integer Overflow (MS09-062; CVE-2009-2501; CVE-2013-1331)
An integer overflow vulnerability exists in Microsoft Windows GDI+. The vulnerability is due to lack of input validation when Microsoft Windows GDI+ handles PNG files. A remote attacker can exploit this vulnerability by enticing the target to open a specially crafted PNG file. Successful...
Update Protection against Sun Java System Application Server HTTP TRACE Vulnerability
Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method which can be leveraged by attackers to gain access to sensitive user information. The HTTP TRACE method returns the contents of client HTTP requests in the entity-body of the TRACE response. A local or remote...
IBM Tivoli Storage Manager Client CAD Service Buffer Overflow (CVE-2009-3853)
IBM Tivoli Storage Manager TSM Express is a backup solution which is designed to protect data from failures and other errors by storing backups and archiving data. The product is available for multiple platforms and various hardware architectures. A buffer overflow vulnerability exists in IBM...
Microsoft Active Directory Federation Services Code Execution (MS09-070; CVE-2009-2509)
Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Federation Services ADFS helps the client to use single sign-on by securely sharing digital identity and entitlement rights across security and enterprise boundaries. A remote...
Ipswitch IMail Server Imailsec.dll Heap Buffer Overflow (CVE-2007-2795)
Ipswitch IMail server is a messaging service suite that supports numerous Internet standard electronic mail exchanging protocols. The IMail IMAP server is a server-side implementation of the IMAP protocol. There exists a heap overflow vulnerability in Ipswitch IMail Server IMAP component. The...
Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)
Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...
Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution (CVE-2004-0630)
Portable Document Format PDF is a file format for documents based on the PostScript description language. One of the products that is widely used to read PDF files is Adobe Acrobat Reader. This product is available on different platforms, including many versions of UNIX and Linux. There is a...
WordPerfect Multiple Vendor libwpd WP3TablesGroup Heap Overflow (CVE-2007-0002)
WordPerfect documents have common file extensions ".WP" and ".WPD", which is used by Corel's proprietary word processing application, WordPerfect. Its popularity was based on the fact that it had been available for a wide variety of computers and operation systems, including Mac OS, Linux, and...
Preemptive Protection against Microsoft Internet Information Services FTP Server Remote Buffer Overflow Vulnerability (MS09-053)
A remote code execution vulnerability has been discovered in Microsoft Internet Information Services IIS. IIS is a collection of Internet services packaged with several versions of the Windows operating system. IIS includes a FTP server service for exchanging and manipulating files over a TCP...
Invalid IIS ASP.Net URI Character Request (CVE-2009-1536)
A denial of service vulnerability has been reported in ASP.NET. ASP.NET is a collection of technologies within the.NET Framework that enable developers to build Web applications and XML Web Services. A remote attacker may exploit this issue to cause a vulnerable server to become non-responsive...
Internet Explorer Memory Corruption (MS09-034; CVE-2009-1917)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles a memory object. When Internet Explorer attempts to access an object that has been deleted, memory may be corrupted in such a way that an...
Microsoft PowerPoint Converter TPrint Record Handling Error (MS09-017; CVE-2009-0227)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overrun vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafte...
SMB TRANS2 Request Validation Remote Code Execution (MS09-001; CVE-2008-4835)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol handles specially crafted SMB packets. The vulnerability is due to insufficient...
Preemptive Protection against Ipswitch IMail Server IMAP SUBSCRIBE Command Buffer Overflow Vulnerability
A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...
Update Protection against Sun Java GIF Image Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Sun Java Runtime Environment JRE. The Sun Java Runtime Environment allows users to run Java applications in a browser or as standalone programs. A remote attacker can exploit this issue to take complete control over an affected system...
MS-RPC Programs Lookup (CVE-2006-1314)
DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...
Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)
Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...
Microsoft Media Player BMP File Handling Buffer Overflow (MS06-005; CVE-2006-0006)
...
Tenda AC10 Command Injection (CVE-2022-32054)
A command injection vulnerability exists in Tenda AC10 router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Kamailio SIP Server Out of Bounds Read (CVE-2018-14767)
An out-of-bounds read vulnerability exists in Kamailio . Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Ivanti Avalanche EnterpriseServer Service setUser Authentication Bypass (CVE-2021-42128)
A authentication bypass vulnerability exists in the Ivanti Avalanche Enterprise Server. The vulnerability is due to lack of authentication for certain functionality...
OMRON CX-One Buffer Overflow (CVE-2022-21137)
A stack-based overflow exists in OMRON CX-One CX-FLnet module. The vulnerability is due to input validation error when processing a parameter...
Adobe ColdFusion Arbitrary File Read And Deletion (APSB22-44: CVE-2022-38424)
A arbitrary file read and deletion vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Bonitasoft Bonita Web Authorization Bypass (CVE-2022-25237)
An authorization bypass vulnerability exists in Bonitasoft Bonita Web. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code...
SonicWall SMA 100 Command Injection (CVE-2021-20039)
A command injection vulnerability exists in SonicWall SMA 100. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Apache Storm Remote Code Execution (CVE-2021-40865)
A remote code execution vulnerability exists in Apache Storm. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Nagios XI Remote Code Execution (CVE-2021-40344)
A remote code execution vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Wuzhi CMS SQL Injection (CVE-2021-40674)
An SQL injection vulnerability exists in Wuzhi CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Advantech iView CommandServlet Directory Traversal (CVE-2021-22656)
A directory traversal vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied path when processing the request in CommandServlet Java class...
Rapid7 Nexpose SQL Injection (CVE-2020-7383)
An SQL injection vulnerability exists in Rapid7 Nexpose. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CRMEB Arbitrary File Upload (CVE-2020-21787)
An arbitrary file upload vulnerability exists in CRMEB. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Course Registration Management System Cross Site Scripting (CVE-2021-29663)
A cross-site scripting vulnerability exists in Course Registration Management System. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
InoERP Remote Code Execution (CVE-2020-28870)
A remote code execution vulnerability exists in InoERP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Belkin Linksys RE6500 Remote Code Execution (CVE-2020-35713)
A remote code execution vulnerability exists in Belkin Linksys RE6500. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
TerraMaster TOS Command Injection (CVE-2020-28188)
A command injection vulnerability exists in TerraMaster TOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Foxit PhantomPDF Use After Free (CVE-2020-8845)
A use-after-free vulnerability exists in Foxit PhantomPDF. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Node.js Express Fileupload Remote Code Execution (CVE-2020-7699)
A remote code execution vulnerability exists in Node.js express-fileupload package. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Wechat Brodcast Project Directory Traversal (CVE-2018-16283)
A directory traversal vulnerability exists in wechat brodcast project wechat brodcast x=1.2.0. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...