WordPress Simple Ads Manager Plugin Arbitrary File Inclusion (CVE-2015-2825)

A File Inclusion vulnerability exists in WordPress Simple Ads Manager Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-106: CVE-2015-6055)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

EMC AutoStart ftagent Opcode 83 Subcode 22 SQL Injection (CVE-2015-0538)

A remote SQL injection vulnerability exists in EMC AutoStart. The vulnerability is due to insufficient validation of remotely supplied data within the ftagent component. A remote unauthenticated attacker can leverage this vulnerability by sending malicious requests to the ftagent process...

Adobe Flash ActionScript 3 ByteArray Use After Free (APSA15-03: CVE-2015-5119)

A vulnerability exists within Adobe Flash Player ActionScript 3 ByteArray class. A successful exploitation can allow a remote attacker to execute arbitrary code on a vulnerable system...

Wordpress Simple Ads Manager Arbitrary File Upload - Ver2 (CVE-2015-2825)

Unrestricted file upload vulnerability has been reported in Simple Ads Manager plugin for WordPress. Successful exploitation of this vulnerability would allow remote attackers to execute code in the server...

Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing - Ver2 (CVE-2010-0032)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...

Monkey HTTPD Server Denial of Service - Ver2 (CVE-2013-3724)

A denial of service vulnerability has been reported in Monkey HTTPD Server. The vulnerability is due to improper bounds checking while parsing headers. A remote attacker can exploit this vulnerability by sending a malicious request to the target server. Successful exploitation of this vulnerabili...

Sielco Sistemi Winlog Buffer Overflow - Ver2 (CVE-2012-3815)

A stack-based buffer overflow vulnerability has been reported in Sielco Sistemi Winlog. The vulnerability is due to insufficient sanitation of TCP requests. A remote attacker can exploit this issue by sending a specially crafted TCP request to the affected server. Successful exploitation would...

Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052) - Ver2 (CVE-2008-3013)

Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...

Microsoft Windows Directory Traversal Elevation of Privilege (MS15-004; CVE-2015-0016)

An elevation of privilege vulnerability exists in Windows Components. The vulnerability is caused when Windows fails to properly sanitize file paths. An attacker can exploit this vulnerability by tricking a user into downloading a specially crafted application...

ManageEngine Desktop Central Dcpluginservelet Policy Bypass (CVE-2014-7862)

A policy bypass vulnerability exists in ManageEngine Desktop Central. The vulnerability is due to lack of authentication and insufficient input validation of the parameters sent to the Dcpluginservelet page when processing HTTPS requests...

Microsoft Windows Media Player ASX Playlist Parsing Buffer Overflow - ver 2 (CVE-2006-6134)

A buffer overflow vulnerability has been reported in Microsoft Windows Media Player. The vulnerability is due to a buffer overflow error when processing malformed ASX file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netscape NSS Library Record Parsing Buffer Overflow (CVE-2004-0826)

A vulnerability exists in Netscape Network Security Services NSS library's SSLv2 message parsing routines...

CA ARCserve Backup Tape Engine Denial of Service - Ver2 (CVE-2008-4398)

There exists a denial of service vulnerability in CA BrightStor ARCserve Backup Tape Engine service. The vulnerability is due to insufficient input validation in the ClientCreateJobHandle library function. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted messa...

Microsoft Message Queue QMGetRemoteQueueName Buffer Overflow - Ver2 (CVE-2008-3479)

A buffer overflow vulnerability has been reported in Microsoft Windows 2000. An attacker could exploit this vulnerability via a crafted RPC call, related to improper processing of parameters to string APIs. Successful exploitation of this vulnerability could allow a remote attacker to execute...

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - Ver2 (CVE-2011-4259)

A memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. An attacker could exploit this vulnerability by enticing a target user to open a...

Symantec Endpoint Protection Manager Cross-Site Scripting (CVE-2014-3438)

A code execution vulnerability has been reported in the Symantec Endpoint Protection Manager. The vulnerability is due to insufficient validation of user input before it is sent back to the user. A remote attacker may exploit this vulnerability to execute arbitrary script code in the context of t...

ManageEngine Multiple Products multipartRequest Directory Traversal (CVE-2014-6036)

A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation on parameters sent to "/servlets/multipartRequest" in HTTP requests. A remote unauthenticated attacker can delete...

ManageEngine Multiple Products FileCollector Directory Traversal (CVE-2014-6035)

A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation in HTTP requests. A remote unauthenticated attacker can upload arbitrary files to arbitrary locations...

ManageEngine EventLog Analyzer agentUpload Directory Traversal (CVE-2014-6037)

A code execution vulnerability has been reported in ManageEngine EventLog Analyzer. The vulnerability is due to lack of authentication and insufficient input validation in agentUpload when processing zip files. A remote unauthenticated attacker can exploit this vulnerability by sending a speciall...

FreeRADIUS Illegal Attributes Denial of Service - ver 2 (CVE-2004-0938)

A vulnerability exists in the way the FreeRADIUS software package handles out of sequence messages. When a RADIUS authentication or accounting request is sent out-of-order to a vulnerable FreeRADIUS, a memory exception occurs. This vulnerability may be leveraged by a remote attacker to deny servi...

Apple QuickTime ftab Atom Stack Buffer Overflow (CVE-2014-1246)

A stack buffer overflow vulnerability exists in Apple QuickTime. The vulnerability is due to insufficient validation on the length of font names when parsing atoms. A remote unauthenticated attacker can exploit this vulnerability by enticing the target user to open a specially crafted file with t...

Microsoft Windows Media Player ASX Parsing Buffer Overflow - Ver2 (CVE-2006-6134)

A buffer overflow vulnerability has been reported in Microsoft Windows Media Player. The vulnerability is due to a buffer overflow error when processing malformed ASX file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft SCCM Reflected Cross-site Scripting (MS12-062) - Ver2 (CVE-2012-2536)

A cross-site scripting vulnerability has been reported in Microsoft System Center Configuration Manager SCCM. The vulnerability is due to an error in the way System Center Configuration Manager handles specially crafted requests. A remote attacker can exploit this issue by enticing a target user ...

Apple Products SSLVerifySignedServerKeyExchange Security Feature Bypass (CVE-2014-1266)

There exists a security feature bypass vulnerability in Apple products. The vulnerability is due to the SSLVerifySignedServerKeyExchange function in the Secure Transport feature not checking the signature in a TLS Server Key Exchange message. This vulnerability allows man-in-the-middle attackers ...

Microsoft Internet Explorer XML Core Services Memory Corruption - Ver2 (CVE-2006-5745)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Indexing Service Loop Counter Underwrap Code Execution - Ver2 (CVE-2009-2507)

A remote code execution vulnerability has been reported in the Microsoft Indexing Service. A remote attacker could exploit this vulnerability by enticing a user to visit a malicious Web page. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on...

MSXML Response Handling Memory Corruption - Ver2 (CVE-2010-2561)

A memory corruption vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due to a bug in the way MSXML handles HTTP responses. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)

Javascript may contain variables assigned with overly long strings. This behavior may indicate an exploitation attempt...

AutoSec Tools V-CMS inline_image_upload.php PHP File Upload And Execution (CVE-2011-4828)

An arbitrary file upload vulnerability has been reported in AutoSec Tools V-CMS...

HP Data Protector CRS Opcode 215 and 263 Stack Buffer Overflow (CVE-2013-2328)

Two stack buffer overflows have been discovered in HP Data Protector...

Microsoft Windows RAS Manager Registry Corruption (CVE-2006-2371)

A buffer overflow vulnerability has been reported in Microsoft Routing and Remote Access Service. The flaw is caused by improper boundary checking of user-supplied data to the Routing and Remote Access service. A remote attacker may leverage this vulnerability by sending a crafted request to the...

HP Data Protector CRS Opcode 234 Stack Buffer Overflow (CVE-2013-2326)

A buffer overflow has been reported in HP Data Protector. The vulnerability exists in the Cell Request Service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 234, which can result in a stack buffer overflow. A remote, unauthenticated attacker...

Microsoft Internet Explorer Deleted Object Memory Corruption (MS13-055; CVE-2013-3143)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

IBM Java ProxyUtil Sandbox Breach (CVE-2012-4820)

A sandbox breach vulnerability exists in IBM Java. The vulnerability is due to an access control failure in the "com.ibm.rmi.util.ProxyUtil" package. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted web page...

Microsoft Windows MSXML XSLT Remote Code Execution (MS13-002; CVE-2013-0007)

A remote code execution vulnerability has been reported in Microsoft Windows...

Cisco NX-OS Interface Commands Privilege Escalation (CVE-2011-2569)

A command execution vulnerability has been reported in Cisco NX-OS...

Multiple Products IASystemInfo.DLL ActiveX Control Buffer Overflow (CVE-2007-0348)

A remote code execution vulnerability has been reported in multiple products containing the IASystemInfo.DLL ActiveX control. The vulnerability is due to a data validation failure by the ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a...

Microsoft SharePoint Server XML Rollup Information Disclosure (MS11-074; CVE-2011-1892)

An information disclosure vulnerability has been reported in Microsoft SharePoint Server. The vulnerability is due to improper handling of malicious XML classes by SharePoint. An attacker could trigger this flaw by loading a malicious XML file to content rollup in an affected SharePoint server...

Novell GroupWise Internet Agent RRULE Parsing Buffer Overflow (CVE-2010-4326; CVE-2011-2662; CVE-2011-2663)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. Novell GroupWise Internet Agent is a component of Novell GroupWise and provides email services, supporting SMTP, POP, and IMAP protocols. A buffer overflow vulnerability has been reported in Novell...

IBM Informix Dynamic Server librpc.dll Multiple Buffer Overflows (CVE-2009-2753)

Informix is a family of relational database management system RDBMS products by IBM. IBM Informix Dynamic Server is an online transaction processing data server. Multiple buffer overflow vulnerabilities has been reported in IBM's Informix Dynamic Server. The vulnerabilities are due to insufficien...

Update Protection against Novell iPrint Client ienipp.ocx volatile-date-time Parsing Buffer Overflow

A buffer overflow vulnerability exists in Novell iPrint Client, an application that allows users to install and manage printers, or submit print jobs from a web browser. The vulnerability is due to a boundary error when parsing malicious 'persistence' parameter values. A remote attacker can explo...

Microsoft SMB Server Race Condition Denial of Service (MS10-012; CVE-2010-0021)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to a race condition in a driver that is part of the SMB stac...

Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071; CVE-2009-3677)

An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...

RealNetworks Helix Server RTSP SET_PARAMETER Heap Buffer Overflow (CVE-2009-2533)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...

Apache Tomcat Directory Listing Information Disclosure (CVE-2006-3835)

Apache Tomcat is an implementation of the Java Servlet and JavaServer Pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

Apple QuickTime PictureViewer Buffer Overflow (CVE-2005-0903; CVE-2005-2340)

Apple QuickTime PictureViewer is an image viewer that supports many image file formats. JPEG is one of the image formats supported by this product. A vulnerability exists in the PictureViewer component of the Apple QuickTime products. The affected product does not correctly process JPEG image...

Symantec Altiris Deployment Solution ActiveX File Download (CVE-2009-3028)

The Symantec Altiris Deployment Solution software provides tools to deploy and configure software across hardware platforms and operating systems. A remote program execution vulnerability exists in Symantec Altiris Deployment Solution. The vulnerability is caused due to the Altiris.AeXNSPkgDL.1...

Oracle Secure Backup Administration Server Command Injection (CVE-2009-1978)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The vulnerability is due to a flaw in the logic used to authenticate a user to the administration server. Successful exploitation of this vulnerability allows remote attackers to bypass authentication on...

Internet Explorer Rows Object Memory Corruption (MS09-019; CVE-2009-1532)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...