13538 matches found
Microsoft Office Memory Corruption (MS17-014: CVE-2017-0006)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to the way Microsoft Office improperly handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Advantech WebAccess updateTemplate.aspx SQL Injection (CVE-2017-5154)
An SQL injection vulnerability has been reported in Advantech WebAccess. The vulnerability is due to insufficient validation of the template parameter in HTTP request sent to the updateTemplate.aspx. A remote attacker could exploit this vulnerability by sending a HTTP request with a malicious SQL...
Cisco WebEx Meetings Server and Center Remote Code Execution (CVE-2017-3823)
A remote code execution vulnerability exists in Cisco WebEx Meetings Server and WebEx Meetings Center browser extensions. The vulnerability is due to a design weakness in the API response parser within the extensions.A remote unauthenticated attacker could exploit this vulnerability by enticing a...
Microsoft Office Information Disclosure (MS16-148: CVE-2016-7265)
An information disclosure vulnerability was discovered within Microsoft Office. The vulnerability is due to reading out of bound memory due to an uninitialized variable which could disclose the contents of memory. A remote attacker can exploit this issue by enticing a victim to open a specially...
Microsoft Office Memory Corruption (MS16-121: CVE-2016-7193)
A buffer overflow vulnerability exists in the Word's RTF parser. The vulnerability is due to invalid parsing of RTF files. By enticing the user to open a specially crafted RTF file, an attacker could exploit this vulnerability to execute arbitrary code on the affected system...
Microsoft Windows PDF Library Remote Code Execution (MS16-080: CVE-2016-3203; CVE-2016-3370)
An out of bound memory access vulnerability exists within Microsoft Edge PDF reader and Windows PDF Library. The vulnerability is due to an error in evaluating the correct value of a buffer. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted PDF file...
Microsoft Internet Explorer Memory Corruption (MS16-095: CVE-2016-3288)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has been deleted. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page...
Apache Jetspeed Remote Code Execution (CVE-2016-0709)
A code execution vulnerability exists Apache Jetspeed. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Media Center Remote Code Execution (MS15-134: CVE-2015-6131)
A flaw has been reported in Windows Media Center when parsing MCL files. This flaw could allow malicious users to execute arbitrary code on a target Windows system by enticing the victim to open a specially crafted Media Center file...
WordPress W3 Total Cache and W3 Super Cache PHP Code Execution (CVE-2013-2010)
A remote code execution vulnerability has been reported in WordPress W3 Total and Super Cache Plugins. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6081)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
IBM Tivoli Storage Manager FastBack Server Opcode 1332 Buffer Overflow (CVE-2015-1925)
A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking on parameters in opcode 1332 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...
Microsoft VBScript and JScript ASLR Bypass (MS15-106: CVE-2015-6052)
A security feature bypass vulnerability has been discovered in JScript and VBScript scripting engines. The vulnerability is due to the way that the VBScript scripting engine uses the Address Space Layout Randomization ASLR security feature. A remote attacker can exploit this issue by enticing a...
Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-106: CVE-2015-6055)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Dell NetVault Backup Denial of Service (CVE-2015-5696)
A Denial of Service vulnerability has been reported in Dell NetVault service. The vulnerability exists in Dell NetVault's nvpmgr.exe and is due to the way invalid "Subcode data" is handled when there is the relevant "Code" value. A remote attacker can trigger this flaw by establishing a connectio...
Microsoft Internet Explorer Elevation of Privilege (MS15-094: CVE-2015-2489)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2432)
Remote code execution vulnerabilities exist in Microsoft Windows Graphics Component. The vulnerability is due to an error in the way Microsoft Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. A remote attacker can exploit this issue by enticing a victim to...
Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2464)
A remote code execution vulnerability has been reported in Windows Graphics Component. The vulnerability is due to the way Windows components handle specially crafted TTF files. A remote attacker can exploit this issue by enticing a user to view TTF files in shared content...
Microsoft Windows Graphics Component Elevation of Privilege (MS15-072; CVE-2015-2364)
An elevation of privilege vulnerability exists in Windows Graphics Component. The vulnerability is due to an error in the way Windows Graphics component improperly process bitmap conversions. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted file in a...
Adobe Acrobat and Reader API Calls Code Execution (APSB15-10: CVE-2015-3062; CVE-2015-3060)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially craft...
PHP Core unserialize process nested data Use After Free - Ver2 (CVE-2014-8142)
A use-after-free vulnerability has been reported in PHP core. The vulnerability is due to a use after free error when handling serialized objects with identical keys within the unserialize function. An attacker could exploit this vulnerability by sending crafted serialized data to a web applicati...
Microsys Promotic PmBase64Decode Buffer Overflow (CVE-2014-9205)
A stack-based buffer overflow vulnerability exists in Microsys's Promotic. The vulnerability is due to an insufficient boundary check on user-supplied data in the PmBase64Decode function. A remote, unauthenticated attacker can exploit this vulnerability by supplying a maliciously crafted base64...
Microsoft Windows ATMFD Font Driver Information Disclosure (MS15-021: CVE-2015-0089; CVE-2015-1670)
This protection will detect and block attempts to exploit this vulnerability...
Microsoft Windows ATMFD Font Driver Remote Code Execution (MS15-021: CVE-2015-0091)
A remote code execution vulnerability has been reported in Microsoft Windows ATMFD Font Driver. The vulnerability is due to an error in Font Driver while improperly overwriting objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted file...
ManageEngine Desktop Central Dcpluginservelet Policy Bypass (CVE-2014-7862)
A policy bypass vulnerability exists in ManageEngine Desktop Central. The vulnerability is due to lack of authentication and insufficient input validation of the parameters sent to the Dcpluginservelet page when processing HTTPS requests...
Creative Software AutoUpdate Engine CTSUEng.ocx ActiveX Control Buffer Overflow (CVE-2008-0955)
A remote code execution vulnerability has been reported inCreative Software AutoUpdate Engine. The vulnerability is due to boundary errors within the AutoUpdate Engine ActiveX control CTSUEng.ocx. A remote attacker can exploit this vulnerability by enticing a user to open a malicious web page...
Asterisk chan_iax2 IAX2 Control Frame LAGR Denial of Service - Ver2 (CVE-2007-3763)
A denial-of-service vulnerability has been reported in Asterisk AsteriskNOW, Asterisk Appliance Developer Kit and Asterisk S800i Appliance. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Exchange Server Outlook Web Access Cross-Site Scripting (MS14-075; CVE-2014-6326)
An elevation of privilege vulnerability exists in Microsoft Exchange Server. The vulnerability is due to an error in Microsoft Exchange input validation. A remote attacker can exploit this issue by enticing a victim to open a specially crafted email with Microsoft Outlook Web Access OWA...
Symantec Endpoint Protection Manager Cross-Site Scripting (CVE-2014-3438)
A code execution vulnerability has been reported in the Symantec Endpoint Protection Manager. The vulnerability is due to insufficient validation of user input before it is sent back to the user. A remote attacker may exploit this vulnerability to execute arbitrary script code in the context of t...
Visual Mining NetCharts Server Admin Console Arbitrary File Upload (CVE-2014-8516)
An arbitrary file upload vulnerability has been reported in Visual Mining NetCharts Server. The vulnerability exists in the Admin console and is due to insufficient validation of filename during the upload process. A remote attacker can exploit this vulnerability to execute arbitrary code on the...
AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution (CVE-2014-5210)
The vulnerability is due to a failure to safely sanitize remotetask SOAP requests within Util.pm. this vulnerability can be exploit by sending crafted requests to the affected service. Successful exploitation could result in arbitrary command execution with root privileges...
Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1762)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1785)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
InduSoft Web Studio Directory Traversal (CVE-2014-0780)
A directory traversal vulnerability has been reported in InduSoft Web Studio. The vulnerability is due to insufficient validation of certain requests while using the development web server. An unauthenticated attacker could exploit this vulnerability by sending crafted requests to the vulnerable...
Zavio IP Camera Firmware 1.6.03 User Code Execution - Ver2 (CVE-2013-2568)
A code execution vulnerability has been reported in Zavio IP Camera Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system and gain the credentials of registered users...
Microsoft Windows GDI+ VML Gradient Buffer Overflow (MS08-052) - Ver2 (CVE-2007-5348)
Vector Markup Language VML is a set of XML tags used for exchange, editing, and delivery of vector graphics on the web. A remote code execution vulnerability has been reported in the way that GDI+ handles VML files. The vulnerability is due to a heap-based buffer overrun when GDI+ fails to proper...
Apache Win32 DOS Batch File Arbitrary Command Execution - Ver2 (CVE-2002-0061)
A command execution vulnerability has been reported in Apache Software Foundation Apache HTTP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CSGuestbook csGuestbook.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1750)
A code execution vulnerability has been reported in Cgiscript.net Csguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing (MS10-004) - Ver2 (CVE-2010-0031)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...
Microsoft MSDE Long TCP Request Buffer Overflow - Ver2 (CVE-2002-1123)
A buffer overflow vulnerability has been reported in Microsoft MSDE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
VEGO Web Forum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0067)
An SQL injection vulnerability has been reported in VEGO Links Builder. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft SharePoint Calendar Cross-Site Scripting - Ver2 (CVE-2011-0653)
A cross-site scripting vulnerability has been reported in SharePoint 2010. The vulnerability is due to insufficient validation of user input to the calendar object by an affected SharePoint server. A remote attacker could exploit this vulnerability by enticing unsuspecting users to open a special...
Apache Solr SolrResourceLoader Directory Traversal (CVE-2013-6397)
A directory traversal vulnerability has been reported in Apache Solr. The vulnerability is due to insufficient validation of the resource paths passed to certain Solr REST services. A remote attacker can exploit this vulnerability by sending a specially crafted request to Apache Solr. Successful...
HP Intelligent Management Center SOM sdFileDownload Information Disclosure (CVE-2013-4826)
An information disclosure vulnerability has been reported in HP Intelligent Management Center Service Operation Management Software...
Novell Netware FTP Server DELE Command Stack Buffer Overflow (CVE-2010-4228)
A code execution vulnerability exists in Novell Netware...
HP LoadRunner micWebAjax.dll ActiveX Control Stack Buffer Overflow (CVE-2013-2368)
A stack buffer overflow vulnerability has been reported in HP LoadRunner...
Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3144)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
Preemptive Protection against Microsoft Office File Parsing Buffer Overflow (MS13-051; CVE-2013-1331)
A remote code execution vulnerability has been reported in Microsoft Office...
Oracle Outside In Paradox Database Stream Filter Denial of Service (CVE-2013-0393)
A denial of service vulnerability has been reported in Oracle Outside In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Paradox databases that contain a malicious entry in a field description array. A remote attacker could trigger this...