Orbit Downloader Long URL Stack Buffer Overflow (CVE-2009-0187)

Orbit Downloader, developed by Orbit Downloader Team, is a graphical download manager for Microsoft Windows operating system. Orbit Downloader works with all major browsers like Opera, Mozilla Firefox, Microsoft Internet Explorer, Maxthon, and Netscape. A buffer overflow vulnerability exists in...

Microsoft XML Core Services Memory Corruption (MS07-042; CVE-2007-2223)

Microsoft Windows is shipped with an XML processing framework, named MSXML or Microsoft XML Core services. The framework is used by applications shipped with the operating system as well as third party applications. The most popular application using this framework is Internet Explorer, which can...

Nullsoft Winamp Player Playlists Name Handling Buffer Overflow (CVE-2006-0476; CVE-2006-0708)

NullSoft Winamp is a multimedia player that is capable of playing many formats of audio and video files. Winamp is capable of retrieving and displaying meta data embedded in media files. There exists a buffer overflow vulnerability in Nullsoft Winamp Player. The vulnerability is caused by...

CA ARCserve Backup for Laptops and Desktops LGServer Buffer Overflows (CVE-2007-3216)

Computer Associates ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile and desktop computers. In general, a backup system is comprised of a server and multiple clients, also known as agents. The server establishes, organizes, and controls all of the...

Microsoft Media Player HeaderExtensionObject Heap Overflow (MS09-052; CVE-2009-2527)

A remote code execution vulnerability exists in the way that Windows Media Player 6.4 handles specially crafted ASF files. Windows Media Player is an application for Windows that supports numerous video, audio, and image formats. ASF Advanced Systems Format is a file format that stores audio and...

RealNetworks Helix Server RTSP SET_PARAMETER Heap Buffer Overflow (CVE-2009-2533)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...

Apache Tomcat Directory Listing Information Disclosure (CVE-2006-3835)

Apache Tomcat is an implementation of the Java Servlet and JavaServer Pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

RealNetworks Helix Server RTSP SETUP Request Denial of Service (CVE-2009-2534)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. A denial of service vulnerability has been reported in RealNetworks Helix Server. The vulnerability is due to an error in the way RealNetworks Helix Server handles SETUP requests. A remote...

Microsoft WINS Buffer Length Heap Overflow (MS09-039; CVE-2009-1923)

Windows Internet Naming Service WINS was designed specifically to support NetBIOS over TCP/IP NetBT, and is required for any environment in which users access resources that have NetBIOS names. A remote code execution vulnerability has been discovered in Microsoft WINS. The vulnerability is due t...

Internet Explorer Rows Object Memory Corruption (MS09-019; CVE-2009-1532)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...

Microsoft PowerPoint Notes Record Parsing Heap Corruption (MS09-017; CVE-2009-1130)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A heap corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading a malformed structure value in a...

Microsoft Office Visio File Multiple Memory Corruptions (MS09-005; CVE-2009-0095; CVE-2009-0096; CVE-2009-0097)

Microsoft Visio is a diagram creation software for Microsoft Windows. Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. A remote attacker could trigger these flaws by convincing the victim to open a specially crafted Visio file. Successful exploitation of these...

SMB TRANS Request Buffer Overflow Remote Code Execution (MS09-001; CVE-2008-4834)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol handles specially crafted SMB packets. The vulnerability is due to insufficient...

Autodesk LiveUpdate ActiveX Control Code Execution (CVE-2008-4471; CVE-2008-4472)

Autodesk provides several software products for professional designing of buildings and other infrastructure. A code execution vulnerability has been reported in Autodesk LiveUpdate ActiveX control within multiple products. The vulnerability is due to an error in the Autodesk LiveUpdate ActiveX...

Microsoft Office PICT Filter Map Structure Memory Corruption (MS08-044; CVE-2008-3021)

PICT is a graphics file format that allows the interchange of graphics both bitmapped and vector, and some limited text support, between Mac applications. A remote code execution vulnerability was reported in the way Microsoft Office handles PICT files. The vulnerability is due to a memory...

IBM Lotus Domino Web Server HTTP Header Buffer Overflow (CVE-2008-2240)

IBM Lotus Domino is a server product that provides enterprise-grade e-mail, collaboration capabilities, and custom application platform. A stack buffer overflow vulnerability was reported in the IBM Lotus Domino Web Server application. The vulnerability is due to an error in the IBM Lotus Domino...

Symantec Backup Exec Server Scheduler ActiveX Control Buffer Overflow (CVE-2007-6016)

Symantec Backup Exec is a data backup and recovery system for Windows. A buffer overflow vulnerability has been reported in the Symantec Backup Exec for Windows Servers. The vulnerability is due to a boundary error in the Symantec Backup Exec ActiveX control of the Scheduler component. To trigger...

Yahoo! Music Jukebox ActiveX Control Multiple Buffer Overflows (CVE-2008-0623; CVE-2008-0624; CVE-2008-0625)

Yahoo! Music Jukebox is a freeware media player for Microsoft Windows. Multiple buffer overflow vulnerabilities have been reported in Yahoo! Music Jukebox. The vulnerabilities are due to boundary errors in certain Yahoo! Music Jukebox ActiveX controls. To trigger these issues, an attacker may...

Microsoft Excel Drawing Object Memory Corruption (MS08-016; CVE-2008-0113)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Office. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target...

Update Protection against Microsoft Windows Message Queuing Remote Code Execution Vulnerability (MS07-065)

A buffer overflow vulnerability exists in Microsoft Windows Message Queuing Service. Microsoft Message Queuing MSMQ is a component of Microsoft Windows designed to act as a message portal between a set of applications requiring message exchange functionality. MSMQ enables applications that are...

Microsoft Excel Version Information Handling Code Execution (MS07-036; CVE-2007-1756; CVE-2007-3030; CVE-2008-0081)

Microsoft Excel is a popular spreadsheet application. Multiple vulnerabilities have been identified in Microsoft Excel. A remote attacker could exploit these issues via a malformed Excel file. Successful exploitation of these vulnerabilities may allow execution of arbitrary code on a target syste...

Preemptive Protection against WMF/EMF Vulnerabilities (MS07-017)

A remote code execution vulnerability has been discovered in the rendering of Enhanced Metafile EMF image format, and a denial of service vulnerability exists in the rendering of Windows Metafile WMF image format. WMF and EMF are image formats used in many Windows programs including Internet...

Novell NetMail WebAdmin Username Stack Buffer Overflow (CVE-2007-1350)

Novell NetMail is an electronic mail server product that supports various email access and exchange protocols, including IMAP Internet Message Access Protocol and NMAP Network Messaging Application Protocol.WebAdmin is a browser based administrative tool used to manage NetMail...

IBM Tivoli Storage Manager Initial Sign-on Request Buffer Overflow (CVE-2006-5855)

The IBM Tivoli Storage Manager TSM is a product used for storing backups and archiving data. The TSM backup operations are performed by the TSM Backup Server service and occur over the network on TCP port 1500. A remote attacker may cause a buffer overflow via a specially crafted initial sign-on...

IMAP Servers LIST Command Buffer Overflow (CVE-2005-4267)

...

Microsoft Distributed Transaction Coordinator Memory Corruption (MS05-051; CVE-2005-2119)

DTC Distributed Transaction Coordinator is a system service that coordinates transactions. A vulnerability was detected in the DTC service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code via a crafted DTC packet...

NNTP (CVE-2004-0574; CVE-2005-1213)

...

Windows PPTP Protocol Use After Free (CVE-2022-21972)

A remote code execution vulnerability exists in Microsoft Windows VPN component. The vulnerability is due to improper handling of PPTP packets...

Jenkins Selenium HTML Report Plugin XML External Entity Injection (CVE-2021-21672)

An XML external entity injection vulnerability exists in Jenkins Selenium HTML Report Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

Apple MacOS Authentication Bypass (CVE-2021-30657)

A vulnerability exists in Apple macOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ImageMagick ReadXBMImage Information Disclosure (CVE-2018-16323)

An information disclosure vulnerability exists in ImageMagick. The vulnerability is due to improper handling of memory buffer by ReadXBMImage. A remote attacker could exploit this vulnerability by having an affected application that implements ImageMagick process a maliciously crafted file...

Palo Alto Networks Multiple Products Command Injection (CVE-2021-3060)

A command injection vulnerability exists in multiple Palo Alto Networks products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Moodle Directory Traversal (CVE-2022-35650)

A Directory Traversal vulnerability exists in Moodle. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...

D-Link DAP-1860 Command Injection (CVE-2019-19597)

A command injection vulnerability exists in D-Link DAP-1860. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Tenda M3 Router Buffer Overflow (CVE-2022-32035)

A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-32: CVE-2022-34228)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

SonicWall SMA100 SQL Injection (CVE-2019-7481)

An SQL injection vulnerability exists in SonicWall SMA100. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Tenda AC15 Buffer Overflow (CVE-2021-44352)

A buffer overflow vulnerability exists in Tenda AC15. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Microsoft Windows Ancillary Function Driver for WinSock Elevation of Privilege (CVE-2022-24507)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SAP NetWeaver Directory Traversal (CVE-2016-3976)

A directory traversal vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Gridpro Request Management Remote Code Execution (CVE-2021-40371)

A remote code execution vulnerability exists in Gridpro Request Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DRK Odenwaldkreis Testerfassung Command Injection (CVE-2021-35062)

A command injection vulnerability exists in NETGEAR. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Sourcecodester Online Covid Vaccination Scheduler Arbitrary File Upload (CVE-2021-36622)

An arbitrary file upload vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech iView deleteZtpConfig SQL Injection (CVE-2021-32932)

A SQL injection vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied input when processing the request in method in Java class...

WordPress Hotel Booking Plugin Remote Code Execution (CVE-2020-29047)

A remote code execution vulnerability exists in WordPress Hotel Booking Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Iteris Vantage Velocity Command Injection (CVE-2020-9020)

A command injection vulnerability exists in Iteris Vantage Velocity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

TOTVS Fluig Platform Directory Traversal (CVE-2020-29134)

A directory traversal vulnerability exists in TOTVS Fluig Platform. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Online Bus Booking System SQL Injection (CVE-2020-25889)

An SQL injection vulnerability exists in Online Bus Booking System Project . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Paginator Elixir Remote Code Execution (CVE-2020-15150)

A remote code execution vulnerability exists in Paginator Elixir . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...