RealNetworks Helix Server RTSP SETUP Request Denial of Service (CVE-2009-2534)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. A denial of service vulnerability has been reported in RealNetworks Helix Server. The vulnerability is due to an error in the way RealNetworks Helix Server handles SETUP requests. A remote...

Microsoft Office Visio File Multiple Memory Corruptions (MS09-005; CVE-2009-0095; CVE-2009-0096; CVE-2009-0097)

Microsoft Visio is a diagram creation software for Microsoft Windows. Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. A remote attacker could trigger these flaws by convincing the victim to open a specially crafted Visio file. Successful exploitation of these...

Microsoft XML Core Services DTD Cross-Domain Scripting (MS08-069; CVE-2008-4029)

MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...

Microsoft XML Core Services Chunked Request (MS08-069; CVE-2008-4033)

MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...

Microsoft Office PICT Filter Invalid Length Memory Corruption (MS08-044; CVE-2008-3018)

PICT is a graphics file format that allows the interchange of graphics both bitmapped and vector, and some limited text support, between Mac applications. A remote code execution vulnerability was reported in the way Microsoft Office handles PICT files. The vulnerability is due to a memory...

Update Protection against Cisco Secure Access Control Server UCP Application CSuserCGI.exe Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in Cisco User-Changeable Password UCP application. The Cisco UCP application is used by Cisco Secure Access Control Server ACS. It allows users to change their ACS passwords with a web-based utility. A remote attacker may exploit this issue to...

Microsoft Excel Drawing Object Memory Corruption (MS08-016; CVE-2008-0113)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Office. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target...

RealNetworks RealPlayer Playlist Handling Buffer Overflow (CVE-2007-5601)

RealNetworks RealPlayer and RealOne Player are media player applications that are capable of playing back numerous multimedia file formats. A buffer overflow vulnerability has been reported in RealNetworks RealPlayer application. The vulnerability is due to an error in a RealPlayer ActiveX contro...

IBM and Lenovo Access Support acpRunner ActiveX Security Bypass (CVE-2007-2928; CVE-2007-2929; CVE-2007-2940)

The Access Support software package for IBM and Lenovo systems includes several ActiveX controls. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page. Successful exploitation could result in remote code execution ...

Preemptive Protection against Ipswitch IMail Server IMAP SEARCH Command Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...

Microsoft Excel Version Information Handling Code Execution (MS07-036; CVE-2007-1756; CVE-2007-3030; CVE-2008-0081)

Microsoft Excel is a popular spreadsheet application. Multiple vulnerabilities have been identified in Microsoft Excel. A remote attacker could exploit these issues via a malformed Excel file. Successful exploitation of these vulnerabilities may allow execution of arbitrary code on a target syste...

Internet Explorer COM Object Instantiation Memory Corruption (MS07-033; CVE-2007-0218; CVE-2007-2222)

COM objects are used to enable data exchange between processes and the creation of dynamic object in different programming languages.Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer and in Microsoft Speech COM objects.A remote attacker could exploit...

LANDesk Management Suite Alert Service Stack Overflow (CVE-2007-1674)

LANDesk Management Suite automates systems and security management tasks and proactively manages, updates and protects desktops, servers and mobile devices from a single console. A stack buffer overflow vulnerability has been discovered in LANDesk Management Suite. The vulnerability is due to a...

Novell NetMail WebAdmin Username Stack Buffer Overflow (CVE-2007-1350)

Novell NetMail is an electronic mail server product that supports various email access and exchange protocols, including IMAP Internet Message Access Protocol and NMAP Network Messaging Application Protocol.WebAdmin is a browser based administrative tool used to manage NetMail...

IMAP Servers Overly Long Commands Buffer Overflow (CVE-2005-3155; CVE-2006-0853; CVE-2006-1255; CVE-2006-2502; CVE-2006-2646; CVE-2007-1579)

...

Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)

Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...

Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)

Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...

Update Protection against Ipswitch WhatsUp Professional 2006 Multiple Vulnerabilities

WhatsUp is a tool from Ipswitch that monitors application and network. WhatsUp runs a custom web server for the application Web interface on port 8022. Multiple flaws have been identified in the server including XSS vulnerabilities, page redirection via cross site scripting and header spoofing...

Jenkins Config File Provider Plugin External Entity Injection (CVE-2021-21642)

An XXE vulnerability exists in Jenkins Config File Provider Plugin. The vulnerability is due to insufficient validation of XML data when utilizing Config File Provider Plugin...

WordPress Core Cross-Site Scripting (CVE-2022-21662)

A cross-site scripting vulnerability exists in WordPress. This vulnerability is due to improper input validation...

Jenkins Matrix Project Plugin Cross-Site Scripting (CVE-2022-20615)

A stored cross-site scripting vulnerability exists in Jenkins Matrix Project Plugin. This vulnerability is due to insufficient validation of node and label names, and label descriptions parameters...

Adobe Acrobat and Reader Improper Input Validation (APSB22-39: CVE-2022-35668)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

IBM QRadar SIEM Insecure Deserialization (CVE-2020-4280)

An insecure deserialization vulnerability exists in IBM QRadar SIEM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Okta Access Gateway Command Injection (CVE-2021-28113)

A command injection vulnerability exists in Okta Access Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Checkbox Survey Remote Code Execution (CVE-2021-27852)

A remote code execution vulnerability exists in Checkbox Survey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Print Spooler Elevation of Privilege (CVE-2022-29104)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WSO2 Multiple Products Remote Code Execution (CVE-2022-29464)

A remote code execution vulnerability exists in WSO2 Multiple Products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Watchguard Firebox and XTM Remote Code Execution (CVE-2022-26318)

A remote code execution vulnerability exists in Watchguard Firebox and XTM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Asus Rt-N53 Buffer Overflow (CVE-2019-20082)

A buffer overflow vulnerability exists in ASUS RT-N53. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-21989)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SonicWall Email Security Directory Traversal (CVE-2021-20023)

A directory traversal vulnerability exists in SonicWall Email Security. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44701)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44706)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-45062)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Fortinet FortiOS Remote Code Execution (CVE-2016-6909)

A remote code execution vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Moxa Multiple Products Command Injection (CVE-2021-39279)

A command injection vulnerability exists in Multiple Moxa Products. Successful exploitation of this vulnerability could allow a remote, authenticated attacker to execute arbitrary commands on the affected system...

Dut Computer Control Engineering PLC Denial Of Service (CVE-2020-18757)

A denial-of-service vulnerability exists in Dut Computer Control Engineering PLC. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Belkin Linksys Denial Of Service (CVE-2020-35716)

A denial-of-service vulnerability exists in Belkin Linksys. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

FiberHome Routers Command Injection (CVE-2021-42912)

A command injection vulnerability exists in FiberHome routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Open Web Analytics SQL Injection (CVE-2014-1206)

An SQL Injection vulnerability exists in Open Web Analytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Exchange Server Remote Code Execution (CVE-2021-28482)

A remote code execution vulnerability exists in Microsoft Exchange Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHP Proxy Arbitrary File Read (CVE-2018-19458)

An arbitrary file read vulnerability exists in PHP Proxy. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to access and read arbitrary file...

Divante Vue Storefront Information Disclosure (CVE-2020-11883)

An information disclosure vulnerability exists in Divante Vue Storefront. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

NI LabVIEW Memory Corruption (CVE-2017-2775)

A memory corruption vulnerability exists in NI LabVIEW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Probot Bot Type Confusion (CVE-2021-26918)

A type confusion vulnerability exists in Probot Bot. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Online Bus Booking System SQL Injection (CVE-2020-25889)

An SQL injection vulnerability exists in Online Bus Booking System Project . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Paginator Elixir Remote Code Execution (CVE-2020-15150)

A remote code execution vulnerability exists in Paginator Elixir . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Sharepoint Remote Code Execution (CVE-2020-1210)

A remote code execution vulnerability exists in Microsoft Sharepoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine SDP Arbitrary File Upload (CVE-2019-8394)

An arbitrary file upload vulnerability exists in Zoho ManageEngine SDP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Unified Contact Center Express Insecure Deserialization (CVE-2020-3280)

An insecure deserialization vulnerability exists in the Cisco Unified Contact Center Express. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...