McAfee AntiVirus ZIP Archive Virus Detection Bypass attack - Ver2 (CVE-2004-0932)

A security bypass vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

Microsoft Web Services on Devices API Memory Corruption (MS09-063) - Ver2 (CVE-2009-2512)

The WSDAPI is an implementation of the Devices Profile for Web Services DPWS for Windows Vista and Windows Server 2008. The DPWS constrains Web Services specifications so that clients can easily discover devices. A remote code execution vulnerability has been reported in the Web Service on Device...

Microsoft Movie Maker Project File Handling Buffer Overflow (MS10-016) - Ver2 (CVE-2010-0265)

Microsoft Movie Maker is a video creating/editing software, that contains features such as effects, transitions, titles/credits, audio track, and timeline narration. A buffer overflow vulnerability has been identified in Microsoft Movie Maker. The vulnerability is due to an error in Microsoft Mov...

PHP-Fusion Multiple SQL Injections (CVE-2014-8596)

SQL injection vulnerability has been reported in PHP-Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Exchange Server Outlook Web Access Cross-Site Scripting (MS14-075; CVE-2014-6326)

An elevation of privilege vulnerability exists in Microsoft Exchange Server. The vulnerability is due to an error in Microsoft Exchange input validation. A remote attacker can exploit this issue by enticing a victim to open a specially crafted email with Microsoft Outlook Web Access OWA...

Visual Mining NetCharts Server Admin Console Arbitrary File Upload (CVE-2014-8516)

An arbitrary file upload vulnerability has been reported in Visual Mining NetCharts Server. The vulnerability exists in the Admin console and is due to insufficient validation of filename during the upload process. A remote attacker can exploit this vulnerability to execute arbitrary code on the...

Joomla Component com_rokdownloads Local File Inclusion (CVE-2010-1056)

A file inclusion vulnerability has been reported in Joomla Com Rokdownloads. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SENKAS Kolibri Webserver GET Request Buffer Overflow (CVE-2014-4158)

A stack buffer overflow vulnerability has been reported in SENKAS Kolibri Webserver 2.0. The vulnerability is due to a boundary error when handling GET request. A remote unauthenticated attacker can exploit the service by sending a crafted GET request to the target service...

AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution (CVE-2014-5210)

The vulnerability is due to a failure to safely sanitize remotetask SOAP requests within Util.pm. this vulnerability can be exploit by sending crafted requests to the affected service. Successful exploitation could result in arbitrary command execution with root privileges...

HP Network Virtualization toServerObject Directory Traversal (CVE-2014-2626)

A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "toServerObject" method. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to...

Symantec Web Gateway dbutils.php SQL Injection (CVE-2014-1651)

An SQL injection vulnerability exists in Symantec Web Gateway. The vulnerability is due to lack of proper sanitization of the "hostname" HTTP parameter passed to some PHP pages. A remote, authenticated attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable...

Adobe Acrobat and Reader Buffer Overflow (APSB14-15; CVE-2014-0511)

A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

InduSoft Web Studio Directory Traversal (CVE-2014-0780)

A directory traversal vulnerability has been reported in InduSoft Web Studio. The vulnerability is due to insufficient validation of certain requests while using the development web server. An unauthenticated attacker could exploit this vulnerability by sending crafted requests to the vulnerable...

Microsoft Office Excel SerAuxTrend Record Remote Code Execution (MS11-045) - Ver2 (CVE-2011-1274)

This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute arbitrary code. Successful exploitation of this vulnerabilit...

Apple QuickTime QTVR QTVRStringAtom Parsing Buffer Overflow - Ver2 (CVE-2012-0667)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a signedness error when processing a specially crafted QTVR string. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cau...

Microsoft Windows GDI+ VML Gradient Buffer Overflow (MS08-052) - Ver2 (CVE-2007-5348)

Vector Markup Language VML is a set of XML tags used for exchange, editing, and delivery of vector graphics on the web. A remote code execution vulnerability has been reported in the way that GDI+ handles VML files. The vulnerability is due to a heap-based buffer overrun when GDI+ fails to proper...

Multiple Antivirus Products RAR Parser MZ Character Sequence Security Bypass - Ver2 (CVE-2012-1443)

A security bypass vulnerability has been reported in multiple antivirus products. An attacker could exploit this vulnerability via a RAR file with an initial MZ character sequence. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on...

Microsoft IIS Input Validation Directory Traversal (CVE-2000-0884)

A directory traversal vulnerability has been reported in Microsoft IIS. The vulnerability is due to an input validation error in Microsoft IIS that does not properly sanitize the URI for directory traversal patterns. Successful exploitation of this vulnerability would allow the attacker to execut...

HP Data Protector CRS Multiple Stack Buffer Overflows (CVE-2013-6195)

Multiple stack buffer overflows exist in HP Data Protector. The vulnerabilities are due to a lack of input sanitization on Strings provided with various opcodes. The strings are not validated for length before being copied into a fixed-size stack buffer. A remote unauthenticated attacker could...

Wordpad and Windows Shell Com Validation Code Execution - Ver2 (CVE-2010-1263)

A code execution vulnerability has been reported in Microsoft Wordpad and Windows Shell. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Buffer Overflow - Ver2 (CVE-2010-0034)

A buffer overflow vulnerability has been reported in Microsoft Office PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint TextCharsAtom record when processing malicious PowerPoint documents. A remote attacker could exploit this vulnerability by convincing a victim to...

Ghostscript Pdf parsing Buffer Overflow - Ver2 (CVE-2009-4897)

A buffer overflow vulnerability has been reported in Artifex AFPL Ghostscript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Oracle Fusion Middleware Showenv Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)

An information disclosure vulnerability has been reported in the Oracle Reports component of Oracle Fusion Middleware. The vulnerability is due to incorrect website configuration that could allow a remote attacker to execute unauthenticated network attacks over HTTP...

RealPlayer CDDA URI Code Execution - Ver2 (CVE-2010-3747)

A code execution vulnerability has been reported in RealNetworks RealPlayer ActiveX control.RealPlayer. The vulnerability is due to access to uninitialized memory during processing of CDDA URIs. A remote attacker could exploit this vulnerability by enticing a target user to open a crafted web fil...

Oracle 9i HTTP Server Web Administration Access Privilege Escalation - Ver2 (CVE-2002-0561)

A privilege escalation vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Apache Solr SolrResourceLoader Directory Traversal (CVE-2013-6397)

A directory traversal vulnerability has been reported in Apache Solr. The vulnerability is due to insufficient validation of the resource paths passed to certain Solr REST services. A remote attacker can exploit this vulnerability by sending a specially crafted request to Apache Solr. Successful...

Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)

A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Microsoft Access 1.x database files .mdb. This vulnerability can be exploited by causing an application that uses the...

Oracle Outside In OS 2 Metafile Parser stack buffer overflow (CVE-2013-5763; CVE-2013-5879)

A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to a boundary error while processing OS/2 Metafiles. Oracle Outside-In is embedded in many enterprise applications. This vulnerability can be exploited ...

HP Data Protector CRS Opcode 1092 Stack Buffer Overflow (CVE-2013-2331)

A stack buffer overflow has been discovered in HP Data Protector...

Microsoft Internet Explorer Javascript Runtime Denial Of Service (MS13-082; CVE-2013-3861)

A remote Denial of Service vulnerability has been reported in Microsoft Internet Explorer...

vBSEO Remote PHP Code Injection (CVE-2012-5223)

A Remote PHP Code Injection has been reported in vBSEO...

InduSoft Web Studio Unauthenticated Insecure Remote Operations - High Confidence (CVE-2011-4051)

A code execution vulnerability has been reported in the Remote Agent component of InduSoft Web Studio. The vulnerability is due to the absence of authentication for incoming requests to the Remote Agent service. A remote, unauthenticated attacker could exploit this vulnerability by sending crafte...

Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow - High Confidence (CVE-2007-6435)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. The Novell GroupWise Client application is capable of communicating with Novell Group server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. A buffer overflow vulnerability has...

Novell GroupWise HTTP Interfaces Arbitrary File Retrieval (CVE-2012-0419)

A directory traversal vulnerability has been reported in the HTTP interfaces of Novell GroupWise Post Office Agent, Message, Transfer Agent and Internet Agent. The vulnerability is due to a failure to sanitize the request URI for directory traversal characters. A remote unauthenticated attacker c...

NFR Agent Heap Overflow (CVE-2012-4956)

...

Digium Asterisk IAX2 POKE Request Denial of Service (CVE-2008-3263)

A denial of service vulnerability has been reported in Digium Asterisk...

Microsoft Exchange and Outlook TNEF Decoding Code Execution (CVE-2006-0002)

A buffer overflow vulnerability exists in the way Microsoft Exchange and Microsoft Outlook process TNEF encoded messages...

EMC AutoStart ftAgent.exe Null Byte Write (CVE-2012-0409)

A memory corruption vulnerability has been reported in EMC AutoStart...

Microsoft Web Proxy TCP State Limited Denial of Service (MS09-016; CVE-2009-0077)

A denial of service vulnerability has been reported in Microsoft Internet Security and Acceleration ISA Server...

HP Diagnostics magentservice.exe Code Execution (CVE-2011-4789)

A stack buffer overflow vulnerability has been reported in HP Diagnostics...

Microsoft Windows HTTP Services Chunked Encoding Integer Overflow (MS09-013; CVE-2009-0086)

A remote code execution vulnerability has been reported in Microsoft Windows HTTP services...

Microsoft Windows Media Player ActiveX Control Code Execution (MS10-027; CVE-2010-0268)

A remote code execution vulnerability has been reported in the Windows Media Player ActiveX control...

Symantec AppStream Client LaunchObj ActiveX Control Code Execution (CVE-2008-4388)

A remote code execution vulnerability has been reported in Symantec AppStream Client...

Oracle Java Array Index Out-of-Bounds Code Execution (CVE-2011-3545)

A code execution vulnerability has been reported in Oracle's JDK and JRE...

Logitech VideoCall ActiveX Control Buffer Overflow (CVE-2007-2918)

A buffer overflow vulnerability has been reported in Logitech VideoCall. The vulnerability is due to a boundary error in an ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted web page. Successful...

Sun Java Web Start BasicServiceImpl Remote Code Execution (CVE-2010-3563)

A remote code execution vulnerability has been reported in Oracle Java SE. The vulnerability is due to a flaw in the way Web Start retrieves security policies. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web-page. Successful exploitation...

Microsoft Office Excel Uninitialized Value Buffer Overflow (MS11-021; CVE-2011-0105)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Microsoft Remote Desktop Client Insecure Library Loading (MS11-017; CVE-2011-0029)

The Remote Desktop feature in Windows enables access to all of the programs, resources, and accessories on a user's computer from another Windows-based computer. Once connected, Remote Desktop gives mouse and keyboard control over the computer while showing everything that is happening on the...

Microsoft Office Excel Drawing Exception Handling Code Execution (MS10-087; CVE-2010-3335)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution (CVE-2010-3747)

RealPlayer is a media player application developed by RealNetworks Inc. This application is capable of playing back numerous multimedia file formats and can open media files from local file system or network servers. A remote code execution vulnerability has been reported in RealNetworks RealPlay...