13538 matches found
Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7262)
A security feature bypass vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this vulnerability by enticing a victim to open a specially...
Distinct TFTP Writable Directory Traversal Execution (CVE-2012-6664)
A vulnerability exists in Distinct TFTP servers. The software contains a directory traversal vulnerability that allows authorized users to upload malicious files to the server. A remote attacker can exploit this vulnerability by uploading an arbitrary, executable file and executing it under the...
Adobe ColdFusion OOXML XXE Information Disclosure (CVE-2016-4264)
An XML external entity XXE processing vulnerability has been reported in the Office Open XML OOXML parsing component of Adobe ColdFusion. The vulnerability is due to a lack of validation on user-supplied input when parsing OOXML documents. A remote attacker could exploit this vulnerability by...
VideoCharge Software Watermark Master (CVE-2013-6935)
A stack based buffer overflow vulnerability was found in Watermark Master 2.2.23. The vulnerability is due to an error when Watermark Master improperly handles a specially crafted WCF file. Remote attackers can exploit this vulnerability and execute arbitrary code on the target machine by enticin...
Microsoft Windows Graphics Component Information Disclosure (MS16-055: CVE-2016-0168)
A Vulnerability was discovered within Internet explorer when handling a spcially crafted EMF file allowing an information disclosure about the user filesystem. The root cause of the vulnerability is related to the CreateColorSpaceW function that tries to build a file path checking of its existanc...
Advantech WebAccess multiple services Buffer Overflow (CVE-2016-0856)
A buffer overflow vulnerability has been reported in the webvrpcs and datacore service of Advantech WebAccess. The vulnerability is due to an insecure call to some functions. A remote, unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted request to the target...
Apache Jetspeed Remote Code Execution (CVE-2016-0709)
A code execution vulnerability exists Apache Jetspeed. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
AWStats Totals awstatstotals.php sort Parameter Code Execution (CVE-2008-3922)
A code execution vulnerability has been reported in AWStats Totals. The vulnerability is due to insufficient sanitization of the "sort" parameter in the "awstatstotals.php". A remote attacker could exploit this vulnerability by dynamically creating an anonymous PHP function...
WordPress Simple Ads Manager Plugin Arbitrary File Inclusion (CVE-2015-2825)
A File Inclusion vulnerability exists in WordPress Simple Ads Manager Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
Asterisk SIP Invite Malformed SDP Denial of Service (CVE-2007-1561)
A denial of service vulnerability exists in the channel driver of Asterisk. A remote attacker may send a SIP INVITE message with an SDP containing one valid and one invalid IP address, causing the server to crash...
Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-106: CVE-2015-6055)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
EMC AutoStart ftagent Opcode 83 Subcode 22 SQL Injection (CVE-2015-0538)
A remote SQL injection vulnerability exists in EMC AutoStart. The vulnerability is due to insufficient validation of remotely supplied data within the ftagent component. A remote unauthenticated attacker can leverage this vulnerability by sending malicious requests to the ftagent process...
Adobe Flash ActionScript 3 ByteArray Use After Free (APSA15-03: CVE-2015-5119)
A vulnerability exists within Adobe Flash Player ActionScript 3 ByteArray class. A successful exploitation can allow a remote attacker to execute arbitrary code on a vulnerable system...
Wordpress Simple Ads Manager Arbitrary File Upload - Ver2 (CVE-2015-2825)
Unrestricted file upload vulnerability has been reported in Simple Ads Manager plugin for WordPress. Successful exploitation of this vulnerability would allow remote attackers to execute code in the server...
Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing - Ver2 (CVE-2010-0032)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...
ManageEngine Multiple Products Multiple Directory Traversal (CVE-2014-7866)
A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation in HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by uploading arbitrary files to...
Microsoft Windows Directory Traversal Elevation of Privilege (MS15-004; CVE-2015-0016)
An elevation of privilege vulnerability exists in Windows Components. The vulnerability is caused when Windows fails to properly sanitize file paths. An attacker can exploit this vulnerability by tricking a user into downloading a specially crafted application...
ManageEngine Desktop Central Dcpluginservelet Policy Bypass (CVE-2014-7862)
A policy bypass vulnerability exists in ManageEngine Desktop Central. The vulnerability is due to lack of authentication and insufficient input validation of the parameters sent to the Dcpluginservelet page when processing HTTPS requests...
Microsoft Windows Media Player ASX Playlist Parsing Buffer Overflow - ver 2 (CVE-2006-6134)
A buffer overflow vulnerability has been reported in Microsoft Windows Media Player. The vulnerability is due to a buffer overflow error when processing malformed ASX file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Netscape NSS Library Record Parsing Buffer Overflow (CVE-2004-0826)
A vulnerability exists in Netscape Network Security Services NSS library's SSLv2 message parsing routines...
RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - Ver2 (CVE-2011-4259)
A memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. An attacker could exploit this vulnerability by enticing a target user to open a...
Microsoft Message Queue QMGetRemoteQueueName Buffer Overflow - Ver2 (CVE-2008-3479)
A buffer overflow vulnerability has been reported in Microsoft Windows 2000. An attacker could exploit this vulnerability via a crafted RPC call, related to improper processing of parameters to string APIs. Successful exploitation of this vulnerability could allow a remote attacker to execute...
Symantec Endpoint Protection Manager Cross-Site Scripting (CVE-2014-3438)
A code execution vulnerability has been reported in the Symantec Endpoint Protection Manager. The vulnerability is due to insufficient validation of user input before it is sent back to the user. A remote attacker may exploit this vulnerability to execute arbitrary script code in the context of t...
ManageEngine Multiple Products FileCollector Directory Traversal (CVE-2014-6035)
A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation in HTTP requests. A remote unauthenticated attacker can upload arbitrary files to arbitrary locations...
ManageEngine EventLog Analyzer agentUpload Directory Traversal (CVE-2014-6037)
A code execution vulnerability has been reported in ManageEngine EventLog Analyzer. The vulnerability is due to lack of authentication and insufficient input validation in agentUpload when processing zip files. A remote unauthenticated attacker can exploit this vulnerability by sending a speciall...
MOXA Device Manager Tool SCADA Buffer Overflow (CVE-2010-4741)
A remote code execution vulnerability has been reported in MOXA Device Manager Tool. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...
Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-0282)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
CA Erwin Web Portal Multiple Directory Traversal Vulnerabilities (CVE-2014-2210)
Multiple directory traversal vulnerabilities have been reported in CA ERwin Web Portal. The vulnerabilities are due to lack of authentication and insufficient input validation in the FileAccessServiceProvider and ProfileIconServlet servlets when processing HTTP requests. By sending crafted HTTP...
Yokogawa CENTUM CS 3000 SCADA Buffer Overflow (CVE-2014-0784)
A remote code execution vulnerability has been reported in Yokogawa CENTUM CS 3000. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...
FreeRADIUS Illegal Attributes Denial of Service - ver 2 (CVE-2004-0938)
A vulnerability exists in the way the FreeRADIUS software package handles out of sequence messages. When a RADIUS authentication or accounting request is sent out-of-order to a vulnerable FreeRADIUS, a memory exception occurs. This vulnerability may be leveraged by a remote attacker to deny servi...
Apple QuickTime ftab Atom Stack Buffer Overflow (CVE-2014-1246)
A stack buffer overflow vulnerability exists in Apple QuickTime. The vulnerability is due to insufficient validation on the length of font names when parsing atoms. A remote unauthenticated attacker can exploit this vulnerability by enticing the target user to open a specially crafted file with t...
Apple QuickDraw PICT Images ARGB Records Handling Memory Corruption - Ver2 (CVE-2007-0462)
A memory corruption vulnerability has been reported in QuickDraw. The vulnerability is due to improper handling of PICT image files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel SxView Record Memory Pointer Corruption (MS10-038) - Ver2 (CVE-2010-1245)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Microsoft Visio DXF File Parsing Code Execution - Ver2 (CVE-2012-1888)
A code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing specially crafted DXF files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...
Microsoft SCCM Reflected Cross-site Scripting (MS12-062) - Ver2 (CVE-2012-2536)
A cross-site scripting vulnerability has been reported in Microsoft System Center Configuration Manager SCCM. The vulnerability is due to an error in the way System Center Configuration Manager handles specially crafted requests. A remote attacker can exploit this issue by enticing a target user ...
Microsoft Windows Media Player ASX Parsing Buffer Overflow - Ver2 (CVE-2006-6134)
A buffer overflow vulnerability has been reported in Microsoft Windows Media Player. The vulnerability is due to a buffer overflow error when processing malformed ASX file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011) - Ver2 (CVE-2008-0108)
Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...
HP SiteScope issueSiebelCmd SOAP Request Code Execution (CVE-2013-4835)
A command execution vulnerability has been found in HP SiteScope...
Log1 CMS writeInfo() PHP Code Injection (CVE-2011-4825)
A PHP code injection vulnerability has been reported in the "Ajax File and Image Manager" component in log1 CMS. A remote attacker could inject arbitrary PHP code into data.php via crafted parameters...
Microsoft Windows ICMPv6 Router Advertisement Denial of Service (MS13-065; CVE-2013-3183)
There exists a denial of service vulnerability in Windows TCP/IP stack...
CoolPDF Reader Image Stream Processing Buffer Overflow (CVE-2012-4914)
A code execution vulnerability has been reported in CoolPDF Reader...
Preemptive Protection against Microsoft Office File Parsing Buffer Overflow (MS13-051; CVE-2013-1331)
A remote code execution vulnerability has been reported in Microsoft Office...
Webmin show.cgi Command Execution (CVE-2012-2982)
A command execution vulnerability has been reported in Webmin...
LANDesk ThinkManagement Suite SetTaskLogByFile Arbitrary File Deletion (CVE-2012-1196)
A directory traversal vulnerability has been reported in LANDesk ThinkManagement Suite...
Cisco NX-OS Interface Commands Privilege Escalation (CVE-2011-2569)
A command execution vulnerability has been reported in Cisco NX-OS...
Multiple Products IASystemInfo.DLL ActiveX Control Buffer Overflow (CVE-2007-0348)
A remote code execution vulnerability has been reported in multiple products containing the IASystemInfo.DLL ActiveX control. The vulnerability is due to a data validation failure by the ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a...
HP OpenView NNM nnmRptconfig.exe schdParams and nameParams Buffer Overflow (CVE-2011-0267)
The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in the HP OpenView...
Microsoft Outlook AttachMethods Remote Code Execution (MS10-045; CVE-2010-0266)
Microsoft Outlook is an e-mail application and a personal information manager. A remote code execution vulnerability has been reported in the way that Microsoft Office Outlook tries to verify attachments in a specially crafted e-mail message. The vulnerability is due to an error in Microsoft Offi...
IBM Informix Dynamic Server librpc.dll Multiple Buffer Overflows (CVE-2009-2753)
Informix is a family of relational database management system RDBMS products by IBM. IBM Informix Dynamic Server is an online transaction processing data server. Multiple buffer overflow vulnerabilities has been reported in IBM's Informix Dynamic Server. The vulnerabilities are due to insufficien...
Microsoft Outlook 2002 Script Execution (CVE-2004-0121)
Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Microsoft Outlook product is an implementation of an email client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...