Preemptive Protection against Sun Solaris sadmind RPC Request Buffer Overflow

A buffer overflow vulnerability was identified in the sadmind service within the Sun Solaris operating system. sadmind is a daemon used to control the servers running Sun Solaris operating system. The vulnerability is due to an input validation error occurring when parsing specially crafted RPC...

Microsoft Word Malformed SPRM Record Buffer Overflow (MS09-027; CVE-2009-0565)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. A remote attacker could trigger this flaw by convincing a victim to...

Update Protection against Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability

A vulnerability was reported in Trend Micro HouseCall . HouseCall is an application for checking whether your computer has been infected by viruses, spyware, or other malware. The vulnerability is caused by a use-after-free error in the HouseCall ActiveX control. This can be exploited to...

Microsoft Excel NAME Record Array Indexing Stack Corruption (MS08-074; CVE-2008-4266)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a stack corruption in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code on a...

Microsoft XML Core Services Chunked Request (MS08-069; CVE-2008-4033)

MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...

Microsoft Office Content-Disposition Header Code Execution (MS08-056; CVE-2008-4020)

Cross-site scripting XSS could enable an attacker to inject code into a user's session with a Web site. A cross-site scripting vulnerability has been reported in Microsoft Office. The vulnerability is due to a flaw in the cdo:// protocol that does not respect the "content-disposition: attachment"...

Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044; CVE-2008-1765; CVE-2008-3020)

BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...

Preemptive Protection against HP OpenView Node Manager Remote Code Execution Vulnerability

HP OpenView Network Node Manager NNM is a software application designed for management, maintenance and monitoring of networks and network devices. The application fails to properly check crafted HTTP requests. By sending a specially-crafted overly long HTTP GET request, a remote unauthenticated...

Update Protection against Cisco Secure Access Control Server UCP Application CSuserCGI.exe Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in Cisco User-Changeable Password UCP application. The Cisco UCP application is used by Cisco Secure Access Control Server ACS. It allows users to change their ACS passwords with a web-based utility. A remote attacker may exploit this issue to...

Novell iPrint Client ienipp.ocx ActiveX Control Stack-based Buffer Overflow (CVE-2008-0935)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client for Windows. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To...

Microsoft Excel Data Validation Record Processing Code Execution (MS08-014; CVE-2008-0111)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a targe...

Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011; CVE-2007-0216; CVE-2008-0108)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...

IPS-1 Protection Updates for Vulnerabilities in Microsoft Windows and Asterisk and IPS-1 Protocol and Protocol Subsystems Updates

A buffer overflow vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code.The handleresponse function in Astersik allows allows remote attackers to cause a denial of service...

Microsoft Windows Kernel IGMPv3 Request Processing Code Execution (MS08-001; CVE-2007-0069)

The Internet Group Management Protocol IGMP is a communications protocol used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships. Overly long IGMP queries transmitted over a short period ...

Microsoft DirectX SAMI File Parsing Code Execution (MS07-064; CVE-2007-3901)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse various file formats which include SAMI files. Synchronized Accessible Media Interchange SAMI files are text files that contain the text strings use...

LANDesk Management Suite Alert Service Stack Overflow (CVE-2007-1674)

LANDesk Management Suite automates systems and security management tasks and proactively manages, updates and protects desktops, servers and mobile devices from a single console. A stack buffer overflow vulnerability has been discovered in LANDesk Management Suite. The vulnerability is due to a...

Microsoft DNS Server RPC Management Interface Buffer Overflow (MS07-029; CVE-2007-1748)

The DNS server service is a component that provides name resolution services to a network.A buffer overflow vulnerability has been reported in the Microsoft Windows Domain Name System DNS Server services.An attacker may exploit this vulnerability to execute arbitrary code on a target system via a...

Preemptive Protection against Snort Inline Fragmentation Denial of Service Vulnerability

Snort is an open source network intrusion prevention and detection system. The frag3 preprocessor in Snort when configured for inline use on Linux is prone to a denial of service vulnerability. A remote attacker could exploit this issue to cause the application to crash on a target system...

Microsoft Windows UPnP Service Remote Code Execution (MS07-019; CVE-2007-1204)

The Universal Plug and Play UPnP service in Microsoft Windows is vulnerable to remote code execution. UPnP is a set of computer network protocols that extends Plug and Play to allow computers and devices to configure network services automatically. A remote attacker may exploit this issue to caus...

Symantec Veritas NetBackup CONNECT_OPTIONS Request Buffer Overflow (CVE-2006-5822)

Symantec Veritas NetBackup Server is a client/server backup application solution used for performing scheduled automatic backups and on-demand backups requested by users. The vulnerability is due to a boundary error in the NetBackup service. An attacker can exploit this issue by sending a...

Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability

McAfee ePolicy Orchestrator provides proactive defense against malicious threats and attacks. McAfee ProtectionPilot is a centralized system security manager designed specifically for businesses with up to 500 systems.A vulnerability has been reported in McAfee ePolicy Orchestrator and in McAfee...

Update Protection against Adobe Reader Extensions Vulnerabilities

Several vulnerabilities have been identified with Adobe Document Server for Reader Extensions 6.0. These vulnerabilities could allow an attacker to disclose sensitive information or conduct cross-site scripting attacks...

Update Protection against Oracle Reports Arbitrary File Reading Vulnerability

Oracle Reports is an enterprise reporting tool that extracts data from multiple sources and inserts it into a formatted report. Oracle Reports fails to validate URI parameters, possibly allowing a remote attacker to read arbitrary files on the Reports Server...

Security Best Practice: Enforcement of MS-RPC Protections over all TCP Ports

Remote Procedure Call RPC is a protocol that a program can use to request a service from a program located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. Microsoft Windows has reported multiple vulnerabilities MS05-039, MS05-043,...

EOT Files (CVE-2006-0010)

...

Microsoft WINS Replication Attack (CVE-2004-1080)

...

Tenda AC15 Command Injection (CVE-2022-28557)

A command injection vulnerability exists in Tenda AC15. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Super Flexible Software Syncovery Cross-site Scripting (CVE-2022-36533)

A cross-site scripting vulnerability exists in Super Flexible Software Syncovery. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Atlassian Jira Server-Side Request Forgery (CVE-2022-26135)

A server-side request forgery vulnerability exists in Atlassian Jira. Successful exploitation of this vulnerability could allow an attacker to access internal resources...

Adobe ColdFusion Improper Restriction of XML External Entity (APSB22-44: CVE-2022-42341)

An Improper Restriction of XML External Entity vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft SharePoint Server Remote Code Execution (CVE-2022-38053)

A remote code execution vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ICONICS GENESIS64 Remote Code Execution (CVE-2022-33318)

A remote code execution vulnerability exists in ICONICS GENESIS64. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Palo Alto Networks Multiple Products Command Injection (CVE-2021-3060)

A command injection vulnerability exists in multiple Palo Alto Networks products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24521)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Spring Core Remote Code Execution (CVE-2022-22965)

A remote code execution vulnerability exists in Spring Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SAP NetWeaver Remote Code Execution (CVE-2018-2380)

A remote code execution vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pulse Connect Secure Command Injection (CVE-2020-8243)

A command injection vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

ExifTool Remote Code Execution (CVE-2021-22204)

A remote code execution vulnerability exists in ExifTool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

WordPress Pie Register Plugin SQL Injection (CVE-2021-24731)

An SQL injection vulnerability exists in WordPress Pie Register plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Wuzhi CMS SQL Injection (CVE-2020-20122)

An SQL injection vulnerability exists in Wuzhi CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Moxa Multiple Products Command Injection (CVE-2021-39279)

A command injection vulnerability exists in Multiple Moxa Products. Successful exploitation of this vulnerability could allow a remote, authenticated attacker to execute arbitrary commands on the affected system...

Buffalo Routers Directory Traversal (CVE-2021-20090; CVE-2021-20091)

A directory traversal vulnerability exists in Buffalo routers. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Zeroshell type Parameter Command Execution (CVE-2009-0545)

ZeroShell is a small Linux distribution for servers and embedded devices. A vulnerability exists in Zeroshell that could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is due to an input validation error in the "cgi-bin/kerbynet" script that does not validat...

Ipswitch WhatsUp Gold SQL Injection (CVE-2015-8261)

An SQL injection vulnerability exists in Ipswitch WhatsUp Gold. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Iteris Vantage Velocity Command Injection (CVE-2020-9020)

A command injection vulnerability exists in Iteris Vantage Velocity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Outlook Security Feature Bypass (CVE-2017-0204)

A security feature bypass vulnerability exists in Microsoft Outlook. Successful exploitation of this vulnerability could allow remote attackers to bypass security tests and protocols on the affected system...

Netgear ProSAFE Cross-Site Request Forgery (CVE-2020-35223)

A cross-site request forgery vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...

Probot Bot Type Confusion (CVE-2021-26918)

A type confusion vulnerability exists in Probot Bot. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

EPrints Command Injection (CVE-2021-26476)

A command injection vulnerability exists in EPrints. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Soabase Exhibitor UI Config Command Injection (CVE-2019-5029)

A command injection vulnerability exists in Soabase Exhibitor, an open source project from Netflix. The vulnerability is due to improper validation of user-supplied input in the Config tab of Exhibitor web interface. A remote unauthenticated attacker can exploit the vulnerability by sending craft...