Oracle Secure Backup Administration property_box.php Command Injection (CVE-2010-0899)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allows for single point of management of data present on network attached storage NAS devices and distributed hosts which may have different operating systems. The data in transit is kept secure ...

Microsoft Windows MSDTC Denial of Service (CVE-2006-1184)

The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...

Microsoft Outlook Express Windows Address Book File Overflow (MS06-016; CVE-2006-0014)

Microsoft Outlook Express OE is an email, newsgroup and address book management client application. The application includes a stand-alone component called Address Book that manages the address book entries. An Address Book can contain entries for individual contacts as well as group lists that...

Adobe AcroPDF ActiveX Control Memory Corruption (CVE-2006-6027)

A memory corruption vulnerability exists in the Adobe AcroPDF ActiveX control. The flaw is due by improper handling of arguments passed to certain methods and properties exposed by the control. By enticing a user to open a malicious HTML page, an attacker may inject and execute arbitrary code on...

Microsoft Excel Malformed SELECTION Record Code Execution (MS06-037; CVE-2006-1301)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Tripwire Format String (CVE-2004-0536)

Tripwire is a software tool that checks file system changes on a target system. Tripwire scans file systems for changes and can be configured to send an email report with the scan details. There is a format string vulnerability in the implementation of the C++ class cPipedMailMessage in Tripwire...

Apple QuickTime FlashPix Movie File Integer Overflow (CVE-2010-0519)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports the parsing and displaying of image files as well as numerous audio/video formats. One of the image file formats supported by QuickTime is the FlashPix format. FlashPix is a bitmapped compute...

Update Protection against Novell iPrint Client ienipp.ocx volatile-date-time Parsing Buffer Overflow

A buffer overflow vulnerability exists in Novell iPrint Client, an application that allows users to install and manage printers, or submit print jobs from a web browser. The vulnerability is due to a boundary error when parsing malicious 'persistence' parameter values. A remote attacker can explo...

Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow (CVE-2008-2086)

The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It allows for the network deployment of Java applications. This component enables stand-alone Java applications to be downloaded from a remote network location and invoked on a target machine. There exists a memory...

Oracle Database Server String Conversion Function Buffer Overflow (CVE-2004-1364)

Oracle's implementation of SQL provides several conversion and transformation functions to help database users work with the various data types. Conversion functions can be executed by all authenticated database users. There exists an input validation vulnerability with Oracle database server...

Adobe JRun 4 Server File Disclosure (CVE-2004-0928)

Adobe JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including IIS and Apache. With IIS, JRun can be registered t...

Microsoft Word Formatted Disk Pages Table Memory Corruption (MS07-014; CVE-2006-6561)

Microsoft Word is a document authoring product released by the Microsoft Corporation. Microsoft Word is shipped with the Microsoft Office suite and also available as a standalone product. The default file extension of Word documents is .doc. There exists a memory corruption vulnerability in...

Microsoft .NET Framework Type Verification Error (MS09-061; CVE-2009-0090; CVE-2009-0091)

The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...

Oracle Database Server MDSYS.SDO_LRS Package SQL Injection (CVE-2006-5340)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Apache Tomcat Directory Listing Information Disclosure (CVE-2006-3835)

Apache Tomcat is an implementation of the Java Servlet and JavaServer Pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

TWiki rev Parameter Shell Command Injection (CVE-2005-2877)

TWiki is a flexible enterprise collaboration platform developed in Perl. The software is a set of CGI programs that are loaded and executed by an HTTP server. TWiki is a structured, community developed documentation framework. It typically runs as a document management system, or a knowledge base...

Microsoft Windows AVI Processing Malformed Header Code Execution (MS09-038; CVE-2009-1545)

Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF. This file type used with applications that capture, edit, and play back audio-video sequences. A remote code execution vulnerability has been discovered in the way Microsoft Windows handles specially crafted AV...

Microsoft Office PICT Filter Map Structure Memory Corruption (MS08-044; CVE-2008-3021)

PICT is a graphics file format that allows the interchange of graphics both bitmapped and vector, and some limited text support, between Mac applications. A remote code execution vulnerability was reported in the way Microsoft Office handles PICT files. The vulnerability is due to a memory...

Update Protection against Microsoft SQL Server Convert Function Buffer Overrun Vulnerability (MS08-040)

A buffer overflow vulnerability was reported in Microsoft SQL Server. Microsoft SQL Server is a relational database management system RDBMS. A remote attacker may exploit this vulnerability to run code on a vulnerable system...

Microsoft Windows Speech Components sapi.dll Code Execution (MS08-032; CVE-2007-0675)

The ActiveX Speech Components sapi.dll is part of the Microsoft Speech Application Programming Interface SAPI that allows the use of speech recognition and speech synthesis within Windows applications. A remote code execution vulnerability has been reported in the ActiveX Speech Components...

Internet Explorer COM Object Instantiation Memory Corruption (MS07-033; CVE-2007-0218; CVE-2007-2222)

COM objects are used to enable data exchange between processes and the creation of dynamic object in different programming languages.Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer and in Microsoft Speech COM objects.A remote attacker could exploit...

Microsoft Exchange Server iCal Properties Denial of Service (MS07-026; CVE-2007-0039)

Simple Mail Transfer Protocol SMTP is a core Internet protocol used for transferring e-mail across the Internet. The Microsoft Exchange Server is a collaborative software server from Microsoft capable of handling numerous Internet protocols, including the Simple Mail Transfer Protocol SMTP. It is...

3Com TFTP Server Transporting Mode Remote Buffer Overflow (CVE-2006-6183)

Trivial File Transfer Protocol TFTP is a protocol used for transferringfiles, allowing remote users to download and upload files to the server. TheTFTP server communicates with clients over UDP port 69. 3Com TFTP Server is a TFTP server service used for easier transfer of filesto or from the...

Update Protection against Microsoft Internet Explorer TIF Folder Vulnerability (MS06-072)

An information disclosure vulnerability has been identified in Microsoft Internet Explorer. The Temporary Internet Files TIF folder contains the cache of the Internet Explorer, enabling faster web browsing and offline browsing. The vulnerability allows remote attackers to retrieve files from the...

Update Protection against ASP.NET Information Disclosure Vulnerability (MS06-033)

ASP.NET is collection of technologies within the.NET Framework that enable developers to build Web applications and XML Web Services. An information disclosure vulnerability exists in ASP.Net that could allow an attacker to bypass ASP.Net security and gain unauthorized access to objects in the...

Update Protection against AWStats "migrate" Shell Command Injection

AWStats is an open source web analystic reporting tool, suitable for analyzing data from internet services. A vulnerability has been identified in AWStats due to improper validation of user input. The vulnerability may be exploited by attackers to execute arbitrary commands. July 5, 2006On July 5...

Security Best Practice: Enforcement of MS-RPC Protections over all TCP Ports

Remote Procedure Call RPC is a protocol that a program can use to request a service from a program located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. Microsoft Windows has reported multiple vulnerabilities MS05-039, MS05-043,...

FTP Patterns (CVE-2005-0696; CVE-2005-3683)

...

Microsoft Distributed Transaction Coordinator Memory Corruption (MS05-051; CVE-2005-2119)

DTC Distributed Transaction Coordinator is a system service that coordinates transactions. A vulnerability was detected in the DTC service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code via a crafted DTC packet...

Apache httpd mod_proxy NULL Pointer Dereference (CVE-2021-44224)

A NULL pointer dereference vulnerability exists in the modproxy module of Apache httpd. The vulnerability is due to improper handling of malformed Request-URIs sent to servers configured as a forward proxy. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted...

Jenkins Rundeck Plugin Cross-Site Scripting (CVE-2022-30956)

A cross-site scripting vulnerability exists in Jenkins Rundeck Plugin. This vulnerability is due to insufficient validation of user input. A remote, authenticated attacker could exploit this vulnerability by sending a crafted message to a vulnerable server...

WordPress Ninja Forms Plugin Arbitrary File Upload (CVE-2022-0888)

An arbitrary file upload vulnerability exists in WordPress Ninja Forms plugin. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...

MCMS Template Management Remote Code Execution (CVE-2022-22930)

A remote code execution vulnerability exists in MCMS Template Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe ColdFusion Stack-based Buffer Overflow (APSB22-44: CVE-2022-35710)

A buffer overflow vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Tenda M3 Router Buffer Overflow (CVE-2022-32036)

A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

QNAP FileStation Cross Site Scripting (CVE-2018-19943)

A cross site scripting vulnerability exists in QNAP FileStation. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Cisco NFVIS Improper Access Control (CVE-2022-20777)

An improper access control vulnerability exists in Cisco NFVIS. Successful exploitation of this vulnerability could allow a remote attacker to compromise the NFVIS host completely...

Apache APISIX Remote Code Execution (CVE-2022-24112)

A remote code execution vulnerability exists in Apache APISIX. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...

LG N1A1 Remote Code Execution (CVE-2018-14839)

A remote code execution vulnerability exists in LG N1A1. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Redis Lua Remote Code Execution (CVE-2022-0543)

A remote code execution vulnerability exists in Redis Lua. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44706)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DRK Odenwaldkreis Testerfassung Command Injection (CVE-2021-35062)

A command injection vulnerability exists in NETGEAR. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Sourcecodester Sales Management System Arbitrary File Upload (CVE-2021-36623)

An arbitrary file upload vulnerability exists in Sourcecodester Sales Management System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Moxa Multiple Products Command Injection (CVE-2021-39279)

A command injection vulnerability exists in Multiple Moxa Products. Successful exploitation of this vulnerability could allow a remote, authenticated attacker to execute arbitrary commands on the affected system...

Dut Computer Control Engineering PLC Denial Of Service (CVE-2020-18757)

A denial-of-service vulnerability exists in Dut Computer Control Engineering PLC. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Oracle Fusion Middleware BI Publisher Arbitrary File Upload (CVE-2021-2392)

An arbitrary file upload vulnerability exists in Oracle Business Intelligence. This vulnerability is due to insufficient input validation in the UploadFndDBCPage class...

Netgear ProSAFE Buffer Overflow (CVE-2020-35227)

A buffer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Netgear ProSAFE Cross-Site Request Forgery (CVE-2020-35223)

A cross-site request forgery vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...

EPrints Command Injection (CVE-2021-26476)

A command injection vulnerability exists in EPrints. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft SharePoint Server Remote Code Execution (CVE-2021-27076)

A remote code execution vulnerability exists in Microsoft Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...