Novell eDirectory iMonitor NDS Server Buffer Overflow (CVE-2005-2551; CVE-2006-2496)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. iMonitor, one of the many components of eDirectory, is a...

Microsoft Excel WOpt Record Memory Corruption (MS10-038; CVE-2010-0824)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...

Firebird XDR Operation Request Handling Denial of Service (CVE-2008-0387)

There exists a null-dereference overflow vulnerability in Firebird database project. The flaw resides in the External Data Representation XDR protocol processing routines. A remote unauthenticated attacker may exploit this vulnerability by sending crafted message to the target server. Successful...

Microsoft Outlook 2002 Script Execution (CVE-2004-0121)

Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Microsoft Outlook product is an implementation of an email client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...

Jive Software Openfire Jabber Server Authentication Bypass (CVE-2008-6508)

Openfire previously known as Wildfire Server is an open source Jabber/XMPP server written in Java. Jabber is an open instant messaging technology that is maintained by the community. Extensible Messaging and Presence Protocol XMPP is an open, XML-inspired protocol originally aimed at...

Internet Explorer STYLE Object Remote Code Execution (CVE-2009-3672)

Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may create a...

Adobe JRun 4 Server File Disclosure (CVE-2004-0928)

Adobe JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including IIS and Apache. With IIS, JRun can be registered t...

Apple QuickTime PictureViewer Buffer Overflow (CVE-2005-0903; CVE-2005-2340)

Apple QuickTime PictureViewer is an image viewer that supports many image file formats. JPEG is one of the image formats supported by this product. A vulnerability exists in the PictureViewer component of the Apple QuickTime products. The affected product does not correctly process JPEG image...

Ipswitch WhatsUp Web Interface SQL Injection (CVE-2005-1250)

WhatsUp Professional 2005 is a network monitoring and resource management solution. WhatsUp Professional uses a relational database to store the information about user accounts and network devices that are monitored by the application. The relational databases supported by WhatsUp Professional ar...

Preemptive Protection against Sun Solaris sadmind RPC Request Buffer Overflow

A buffer overflow vulnerability was identified in the sadmind service within the Sun Solaris operating system. sadmind is a daemon used to control the servers running Sun Solaris operating system. The vulnerability is due to an input validation error occurring when parsing specially crafted RPC...

Microsoft DNS Server Validation Spoofing Weakness (MS09-008; CVE-2009-0233; CVE-2009-0234)

Multiple spoofing vulnerabilities have been reported in Windows DNS server. These vulnerabilities could allow a remote attacker to spoof responses and insert records into the DNS server's cache. The DNS caching resolver service saves the responses to DNS queries so that the DNS server is not...

Microsoft Windows search-ms Protocol Handler Command Execution (MS08-075; CVE-2008-4269)

Windows Search is a standard component of Windows Vista that allows instant search capabilities for most common file and data types.Windows Search has XML-based files that save information about a search in Windows. A remote code execution vulnerability was reported in Windows Explorer which allo...

Cisco WebEx Meeting Manager ActiveX Control Buffer Overflow (CVE-2008-3558)

The Webex Meeting Manager is a client-side program that is provided by the Cisco Webex meeting service, an online collaboration suite. A buffer overflow vulnerability has been reported in the Cisco Webex Meeting Manager application.The vulnerability is due to a boundary error in a Cisco Webex...

Microsoft Excel FORMAT Record Array Index Memory Corruption (MS08-043; CVE-2008-3005)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel handles index array records. The vulnerability is due to an error in Microsoft Excel that fails to properly validate index array records when loading Excel...

Novell eDirectory HTTP Headers Denial of Service (CVE-2008-0927)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP directory-based identity management system that centralizes the management of user identities, access privileges and many other network resources. A denial of service vulnerability was identified in Novell eDirectory. The...

Internet Explorer ANIMATEMOTION Memory Corruption (MS08-010; CVE-2008-0077)

Microsoft Internet Explorer is the most widely used Internet browser. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer when calling the property method. A remote attacker could exploit this issue by convincing a user to visit a specially crafted Web page...

Preemptive Protection against Ipswitch IMail Server IMAP SEARCH Command Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...

Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)

Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...

Update Protection against ASP.NET Information Disclosure Vulnerability (MS06-033)

ASP.NET is collection of technologies within the.NET Framework that enable developers to build Web applications and XML Web Services. An information disclosure vulnerability exists in ASP.Net that could allow an attacker to bypass ASP.Net security and gain unauthorized access to objects in the...

IMAP Directory Traversal (CAN-2005-1902; CAN-2006-2414)

...

Doufox Arbitrary File Upload (CVE-2022-38621)

An arbitrary file upload vulnerability exists in Doufox. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...

Microsoft DirectX Graphics Kernel Elevation of Privilege (CVE-2022-37954)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WhatsApp Desktop Cross Site Scripting (CVE-2019-18426)

A cross site scripting vulnerability exists in WhatsApp Desktop. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Checkbox Survey Remote Code Execution (CVE-2021-27852)

A remote code execution vulnerability exists in Checkbox Survey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

LG N1A1 Remote Code Execution (CVE-2018-14839)

A remote code execution vulnerability exists in LG N1A1. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Commerce Command Injection (CVE-2022-24086)

A command injection vulnerability exists in Adobe Commerce. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Internet Explorer Security Feature Bypass (CVE-2022-24502)

A security bypass vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

Aviatrix Controller Directory Traversal (CVE-2021-40870)

A directory traversal vulnerability exists in Aviatrix Controller. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-20130)

An unrestricted file upload vulnerability exists in ManageEngine ADManager Plus. The vulnerability is due to lack of validation of uploaded files in PasswordExpiryAction class...

Mercury Router Command Injection (CVE-2020-22724)

A command injection vulnerability exists in Mercury Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

HomeMatic Remote Code Execution (CVE-2021-33032)

A remote code execution vulnerability exists in Homematic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle Fusion Middleware BI Publisher Arbitrary File Upload (CVE-2021-2392)

An arbitrary file upload vulnerability exists in Oracle Business Intelligence. This vulnerability is due to insufficient input validation in the UploadFndDBCPage class...

FiberHome Routers Command Injection (CVE-2021-42912)

A command injection vulnerability exists in FiberHome routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Open Web Analytics SQL Injection (CVE-2014-1206)

An SQL Injection vulnerability exists in Open Web Analytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Nagios XI Remote Code Execution (CVE-2019-15949)

A remote code execution vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zeroshell type Parameter Command Execution (CVE-2009-0545)

ZeroShell is a small Linux distribution for servers and embedded devices. A vulnerability exists in Zeroshell that could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is due to an input validation error in the "cgi-bin/kerbynet" script that does not validat...

Divante Vue Storefront Information Disclosure (CVE-2020-11883)

An information disclosure vulnerability exists in Divante Vue Storefront. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

libEBML Use After Free (CVE-2015-8789)

A use-after-free vulnerability exists in libEBML. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Defender Remote Code Execution (CVE-2021-1647)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Nagios XI ajaxhelper.php Command Injection (CVE-2020-15901)

A command injection vulnerability exists in Nagios XI. This vulnerability is due to insufficient validation of the input parameters in the ajaxhelper.php script...

FasterXML jackson-databind Remote Code Execution (CVE-2020-14645; CVE-2020-24616; CVE-2020-8840)

FasterXML jackson-databind is a java library that contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor, under the right conditions, exploit Java applications performing unsafe deserialization of objects. Successful exploitation of unsafe deserializatio...

Gonitro Nitro Pro Integer Overflow (CVE-2020-6092)

An integer overflow vulnerability exists in Gonitro Nitro Pro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Security Manager Remote Code Execution (CVE-2020-27131)

A remote code execution vulnerability exists in Cisco Security Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Geutebrueck re_porter 16 DVR Cross-site Scripting (CVE-2018-15533)

A cross-site scripting vulnerability exists in Geutebrueck re porter 16 firmware x under 7.8.974.20. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft Diagnostic Hub Standard Collector Elevation Of Privilege (CVE-2018-0952)

An elevation of privilege vulnerability exists in Microsoft visual studio 2015 update3. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Rittal PDU Command Injection (CVE-2020-11956)

A command injection vulnerability exists in Rittal PDU. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...

Eaton Intelligent Power Manager system_srv Command Injection (CVE-2020-6651)

A command injection vulnerability exists in Eaton Intelligent Power Manager. The vulnerability is due to a lack of validation of a user-supplied string in requests handled by systemsrv.js before using it to execute a system command...

WordPress 10Web Photo Gallery Plugin Cross Site Scripting (CVE-2020-9335)

A cross site scripting vulnerability exists in WordPress 10Web Photo Gallery plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Fusionpbx Command Execution (CVE-2019-15029)

A command execution vulnerability exists in Fusionpbx. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft VBScript Remote Code Execution (CVE-2019-1485)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...