13538 matches found
BigAnt Server SCH Request Stack Buffer Overflow (CVE-2012-6275)
A stack buffer overflow vulnerability exists in BigAnt Server. The vulnerability is due to a boundary error when handling SCH and DUPF requests. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server. Successful exploitation would result...
Microsoft DNS Server Denial of Service - Specific (MS12-017; CVE-2012-0006)
A denial of service vulnerability has been reported in Microsoft DNS servers. The vulnerability is due to the way that the DNS server improperly handles objects in memory when looking up the resource record of a domain. A remote attacker may exploit this issue by sending a specially crafted DNS...
Apache HTTP Server mod_rpaf Denial of Service (CVE-2012-3526)
A denial of service vulnerability has been reported in Apache's HTTP Server...
Microsoft Media Player Audio Sampling Rate Memory Corruption (MS08-054; CVE-2008-2253)
A remote code execution vulnerability has been reported in Microsoft Windows Media Player 11. The vulnerability is due to a buffer overflow condition in Windows Media Player 11 that fails to properly handle specially crafted audio-only files. A remote attacker could trigger this flaw by convincin...
Zenturi ProgramChecker ActiveX Components ActiveX Controls Buffer Overflows (CVE-2007-2987)
Multiple buffer overflow vulnerabilities have been reported in Zenturi ProgramChecker. The vulnerabilities are due to a data validation failure, resulting in a buffer overflow. A remote attacker may exploit these vulnerabilities by enticing a target user to open a specially crafted HTML file...
Microsoft DNS Resolution LLMNR Query Remote Code Execution (MS11-030; CVE-2011-0657)
Link-local Multicast Name Resolution LLMNR is a new protocol that provides an additional method to resolve the names of neighboring computers. It is especially useful for networks that do not have a DNS server. LLMNR uses a simple exchange of request and reply messages to resolve computer names t...
Nullsoft Winamp MIDI Timestamp Stack Buffer Overflow (CVE-2010-4370)
Winamp is a popular multimedia player, produced by Nullsoft, which is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files, as well as numerous other formats. Among the audio files supported by Winamp are MIDI files and MUS files...
Symantec Antivirus Intel Alert Handler Service Denial of Service (CVE-2010-0111)
The Symantec System Center includes an optional component called the Alert Management System AMS2. The AMS2 starts multiple services on the system that include an alert handler service from Intel Corporation called the AMS2 Handler Manager Service HNDLRSVC.EXE. A denial of service vulnerability h...
Preemptive Protection against WordPress cforms Plugin Cross-Site Scripting (XSS) Vulnerability
A cross-site scripting XSS vulnerability has been reported in the cforms plugin for WordPress. cforms is a highly customizable, flexible and powerful form builder plugin, covering a variety of use cases and features from attachments to multi-form management. A remote attacker may exploit this...
Apache HTTP Server auth_ldap Logging Function Format String (CVE-2005-3656; CVE-2006-0150)
There exists a format string vulnerability in the authldap module used with Apache HTTP server. The vulnerability is a result of the failure to properly verify string arguments passed to a logging function, resulting in a memory corruption condition. A remote attacker can exploit this vulnerabili...
Sun Java Runtime Environment Pack200 Decompression Integer Overflow (CVE-2008-5352; CVE-2009-1095)
There exists an integer overflow vulnerability in Sun Java Runtime Environment software. The vulnerability is due to insufficient validation while decompressing Pack200 jar.pack.gz files. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted HTML file...
Microsoft Visual Basic Document Properties Buffer Overrun (MS06-047; CVE-2006-3649)
Microsoft Visual Basic for Applications VBA is an implementation of Microsoft's Visual Basic which is built into all Microsoft Office applications, as well as some other Microsoft applications, such as Microsoft Visio and Microsoft Works Suite. Visual Basic VB is an event driven programming and...
Preemptive Protection against Multiple Vendors OPIE Off-by-one Stack Buffer Overflow Vulnerability
A stack buffer overflow vulnerability has been reported in OPIE. OPIE, "One time Passwords In Everything", is a login and password package installed on the server and the client, which makes untrusted networks safer against password-sniffing packet analysis software. OPIE is shipped with DragonFl...
Adobe RoboHelp Server Arbitrary File Upload and Execute (CVE-2009-3068)
Adobe RoboHelp Server is a server-based Help solution that provides real-time end-user feedback on help and knowledge bases. It gathers and logs data about what questions users ask while searching content and how users navigate through topics. The product consists of an administrative web interfa...
Internet Explorer HTML Tag Memory Corruption (MS06-013; CVE-2006-1188)
Microsoft Internet Explorer IE is the most widely used web browser application today. The browser is capable of processing HTML, scripting languages, and interpretation of various other popular Internet specifications. There are numerous versions of the HTML standard that are interpreted by the...
AOL Instant Messenger Away Message Buffer Overflow (CVE-2004-0636)
AOL Instant Messenger AIM is an instant messaging and presence computer program which allows registered users to communicate in real time. AOL Instant Messenger AIM registers itself as the handler of URL scheme aim. There exists a vulnerability in the way AOL Instant Messenger AIM parses an away...
Internet Explorer Response Redirect Information Disclosure (CVE-2010-0255)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer that fails to prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access...
Microsoft Windows GDIplus PNG Chunk Processing Integer Overflow (MS09-062; CVE-2009-2501; CVE-2013-1331)
An integer overflow vulnerability exists in Microsoft Windows GDI+. The vulnerability is due to lack of input validation when Microsoft Windows GDI+ handles PNG files. A remote attacker can exploit this vulnerability by enticing the target to open a specially crafted PNG file. Successful...
Ipswitch IMail Server SMTP Service Buffer Overflow (CVE-2006-4379)
The Ipswitch IMail Server is a mail server product geared towards medium to large size organizations. It contains implementations of POP3, IMAP4, and SMTP servers. The SMTP server module is installed and started in a default installation. There exists a vulnerability in the SMTP module of the...
Preemptive Protection against Microsoft Internet Information Services FTP Server Remote Buffer Overflow Vulnerability (MS09-053)
A remote code execution vulnerability has been discovered in Microsoft Internet Information Services IIS. IIS is a collection of Internet services packaged with several versions of the Windows operating system. IIS includes a FTP server service for exchanging and manipulating files over a TCP...
Internet Explorer HTML Objects Memory Corruption (MS09-034; CVE-2009-1918)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles table operations in specific situations. When Internet Explorer handles table operations in specific situations, it may corrupt memory in su...
Update Protection against Novell Client NetIdentity Agent Remote Code Execution
A remote code execution vulnerability exists in Novell Client NetIdentity Agent. The Novell NetIdentity agent works with eDirectory authentication to provide background authentication to Windows Web-based applications that require eDirectory authentication. The flaw is due to insufficient sanity...
Microsoft DirectShow Pointer Validation Remote Code Execution (MS09-028; CVE-2009-1538)
Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The vulnerability is due to an error in the Microsoft DirectShow component that fails to properly validate certain values when updating ...
Microsoft DirectShow Video ActiveX Control Stack Buffer Overflow (CVE-2008-0015)
The Microsoft Video Control object is a Microsoft ActiveX control that connects Microsoft DirectShow filters for use in capturing, recording, and playing video. A stack buffer overflow vulnerability has been discovered in Microsoft DirectShow. The flaw is in the way Microsoft Video ActiveX contro...
Microsoft Excel TXO and OBJ Records Parsing Memory Corruption (MS08-074; CVE-2008-4265; CVE-2009-0100)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code ...
Microsoft Word 6 and Windows Write Converters Memory Corruption (MS09-010; CVE-2009-0087)
Office Text Converters are a default component of Microsoft Office that allow users to open and save files as older Office file formats. WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. They also allow...
Oracle Secure Backup NDMP CONNECT_CLIENT_AUTH Command Buffer Overflow (CVE-2008-5444)
Oracle Database Server is an enterprise-level relational database application suite. Oracle Secure Backup is a backup solution allowing for single point of management of data present on network attached storage NAS devices and distributed hosts. Oracle Secure Backup is using NDMP protocol to...
SMB TRANS Request Buffer Overflow Remote Code Execution (MS09-001; CVE-2008-4834)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol handles specially crafted SMB packets. The vulnerability is due to insufficient...
Update Protection against Sun Java GIF Image Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Sun Java Runtime Environment JRE. The Sun Java Runtime Environment allows users to run Java applications in a browser or as standalone programs. A remote attacker can exploit this issue to take complete control over an affected system...
Preemptive Protection against WMF/EMF Vulnerabilities (MS07-017)
A remote code execution vulnerability has been discovered in the rendering of Enhanced Metafile EMF image format, and a denial of service vulnerability exists in the rendering of Windows Metafile WMF image format. WMF and EMF are image formats used in many Windows programs including Internet...
Internet Explorer COM Object Instantiation Memory Corruption (MS07-016; CVE-2007-0219; CVE-2007-4697)
Component Object Models COM Objects are used to enable data exchange between processes and the creation of dynamic object in different programming languages.Microsoft Internet Explorer is prone to multiple remote code execution vulnerabilities. The vulnerabilities are due to a memory corruption...
Tenda AC15 Command Injection (CVE-2022-28557)
A command injection vulnerability exists in Tenda AC15. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Marval MSM Remote Code Execution (CVE-2022-31885)
A remote code execution vulnerability exists in Marval MSM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Advantech iView Directory Traversal (CVE-2022-2139)
A directory traversal vulnerability exists in Advantech iView. The vulnerability is due to improper validation of user-supplied path before using in findCfgDeviceListDetailsExport method...
Microsoft Windows Client Server Run-time Subsystem Elevation of Privilege (CVE-2022-37987)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ImageMagick ReadXBMImage Information Disclosure (CVE-2018-16323)
An information disclosure vulnerability exists in ImageMagick. The vulnerability is due to improper handling of memory buffer by ReadXBMImage. A remote attacker could exploit this vulnerability by having an affected application that implements ImageMagick process a maliciously crafted file...
Naviwebs Navigate CMS Directory Traversal (CVE-2018-17553)
A directory traversal vulnerability exists in Naviwebs Navigate CMS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Microsoft Point-to-Point Tunneling Protocol Remote Code Execution (CVE-2022-23270)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
FatPipe Multiple Products Unrestricted File Upload (CVE-2021-27860)
An unrestricted file upload vulnerability exists in FatPipe Multiple Products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Ancillary Function Driver for WinSock Elevation of Privilege (CVE-2022-24507)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache HTTP Server Directory Traversal (CVE-2021-41773; CVE-2021-42013)
A directory traversal vulnerability exists in Apache HTTP Server. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36955)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rapid7 Nexpose SQL Injection (CVE-2020-7383)
An SQL injection vulnerability exists in Rapid7 Nexpose. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2021-31979)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco HyperFlex HX Command Injection (CVE-2021-1498; CVE-2021-1497)
A remote command execution vulnerability exists in Cisco Hyperflex. The vulnerability is due to improper input sanitization...
Aruba Networks ClearPass Policy Manager Remote Code Execution (CVE-2020-7115)
A remote code execution vulnerability exists in Aruba Networks ClearPass Policy Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Kronos Web Time And Attendance Privilege Escalation (CVE-2020-8495)
A privilege escalation vulnerability exists in Kronos Web Time And Attendance. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Netgear Smart WiFi Router Authentication Bypass (CVE-2019-17137)
An authentication bypass vulnerability exists in Netgear Smart WiFi Router. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Microsoft SharePoint Server Remote Code Execution (CVE-2020-16951)
A remote code execution vulnerability exists in Microsoft SharePoint server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Jabber Cross-Site Scripting (CVE-2020-26085)
A cross site scripting vulnerability exists in Cisco Jabber. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...