13538 matches found
EMC AlphaStor Device Manager Command Injection - Improved performance (CVE-2013-0928)
A remote command execution vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious request containing a specially crafted parameter to the target server. Successful...
Cisco Prime LAN Management Solution Remote Command Execution (CVE-2012-6392)
A remote command execution vulnerability exists in Cisco Prime LAN Management Solution. The vulnerability is due to use of non encrypted connection with the server. A successful exploitation would allow the attacker to execute commands, and send files...
Lattice Semiconductor PAC-Designer Symbol Value Buffer Overflow (CVE-2012-2915)
A stack buffer overflow vulnerability has been reported in Lattice Semiconductor PAC-Designer. The vulnerability is due to the improper handling of validation of specially crafted pac files. Successful exploitation would result in execution of arbitrary code, but requires tricking a user into...
Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)
A buffer overflow vulnerability has been reported in Apple QuickTime...
Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)
A cross-site-scripting vulnerability has been reported in Trend Micro InterScan Messaging Security Suite...
Apple QuickTime TeXML Transform Attribute Parsing Buffer Overflow (CVE-2012-0663)
A stack buffer overflow vulnerability has been reported in Apple QuickTime...
IBM Rational ClearQuest CQOle ActiveX Code Execution (CVE-2012-0708)
A remote code execution vulnerability has been reported in IBM Rational ClearQuest...
EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395)
A buffer overflow vulnerability has been reported in EMC NetWorker...
HP Data Protector Multiple Products FinishedCopy SQL Injection (CVE-2011-3162)
An SQL injection vulnerability has been reported in multiple HP Data Protector products...
Oracle GlassFish Server Invalid Username Cross Site Scripting (CVE-2011-2260)
A persistent cross-site scripting vulnerability has been reported in Oracle GlassFish Server. The vulnerability is due to insufficient input validation of username values. A remote attacker may exploit this vulnerability by sending a specially crafted POST request to an affected server. Successfu...
Microsoft Office Visio ORMELEMS.DLL Object Memory Corruption (MS11-008; CVE-2011-0092)
Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been identified in Microsoft Visio. The vulnerability is due to an error in Microsoft Visio while validating objects in memory. A remote attacker may exploit this issue by enticing a us...
Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow (CVE-2010-3974; CVE-2010-4701)
A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...
Firebird Database Server Username Handling Buffer Overflow (CVE-2008-0467)
Firebird sometimes called FirebirdSQL is a relational database management system offering many ANSI SQL-2003 features. It runs on Linux, Windows, and a variety of Unix platforms. Started as a fork of Borland's open source release of InterBase, the Firebird codebase is maintained by the Firebird...
Microsoft OpenType Font Validation Elevation of Privilege (MS10-078; CVE-2010-2741)
OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. An elevation of privilege vulnerability has been reported in the...
Microsoft Word sprmCMajority Record Parsing Remote Code Execution (MS10-056; CVE-2010-1900)
A remote code execution vulnerability exists in the way that Microsoft Office Word handles malformed records inside of a specially crafted Word file. Exploitation of this vulnerability requires that a user open a specially crafted Word file with an affected version of Microsoft Office Word. An...
Sun Java Runtime Environment JAR File Processing Stack Buffer Overflow (CVE-2008-5354)
Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...
Microsoft DirectShow Crafted MJPEG Stream Handling Code Execution (MS10-033; CVE-2010-1879)
Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. Audio Video Interleave AVI is a file type that is used with applications that capture, edit, and play back audio-video sequences. A remo...
Apple Quicktime Heap Overflow (CVE-2004-0431)
There is an integer overflow in the media file parsing mechanism within Apple QuickTime, a tool that allows users to play, create, and deliver multimedia. There is a vulnerability in the media file parser within Apple QuickTime. It is possible for a remote attacker to execute arbitrary code on th...
Microsoft Excel DbOrParamQry Record Parsing Code Execution (MS10-017; CVE-2010-0264)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...
Internet Explorer WMF Image Parsing Memory Corruption (CVE-2006-0020)
The Windows Metafile WMF is a standard Windows image file format. It consists of a set of graphics functions and parameters that describe the steps required to render an image. WMF is a 16-bit format that can contain both vector and bitmap information. A WMF file contains a main header, followed ...
Microsoft DirectShow AVI Parser Heap Overflow (MS10-013; CVE-2010-0250)
Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. Audio Video Interleave AVI is a file type that is used with applications that capture, edit, and play back audio-video sequences.A remot...
Update Protection against Microsoft Internet Explorer Request Header Information Disclosure Vulnerability (MS08-031)
An information disclosure vulnerability has been reported in the way that Internet Explorer handles certain request headers. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which may allow the attacker to view data fr...
HP OpenView Network Node Manager HTTP Handling Buffer Overflow (CVE-2008-1697)
HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, for example: OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. There exists a buffer...
MySQL XML Functions Scalar XPath Denial of Service (CVE-2009-0819)
MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. MySQL Server...
Microsoft SQL Server INSERT Statement Buffer Overflow (MS08-040; CVE-2008-0106)
Microsoft SQL Server is a popular relational database management system RDBMS. Microsoft SQL Server can be administered programmatically using system stored procedures, or through Distributed Management Objects DMO. Its primary query language is Transact-SQL, an implementation of the ANSI/ISO...
Oracle Database Server MDSYS.SDO_LRS Package SQL Injection (CVE-2006-5340)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
HP StorageWorks Storage Mirroring Double Take Service Code Execution (CVE-2008-1661)
HP StorageWorks is a collection of storage solutions from Hewlett Packard. These solutions include online storage, nearline storage, storage networking , archiving, and storage software. One of the storage software solutions is the Storage Mirroring Software. HP StorageWorks Storage Mirroring...
GNU Radius SQL Accounting Format String (CVE-2006-4181)
GNU Radius is a suite of applications which perform user authentication and accounting using the Remote Authentication Dial In User Service RADIUS protocol. The RADIUS protocol is specifically designed for authentication, authorization and accounting of various network services. RADIUS is most...
Internet Explorer DirectAnimation COM Object Memory Corruption (MS06-042; CVE-2006-3638)
Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating a COM objec...
Preemptive Protection against Microsoft GDI+ PNG Heap Overflow Vulnerability (MS09-062)
A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...
Microsoft GDI+ WMF Integer Overflow (MS09-062; CVE-2009-2500)
The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer.Windows Metafile WMF is a 16-bit metafile image format optimized for the Windows operating system that can contain both vector information and bitmap...
Symantec Alert Management System Alert Originator Service Buffer Overflow (CVE-2009-1430)
Symantec System Center provides centralized systems and policy management for Norton Antivirus Enterprise Solution across multiple Windows NT and NetWare networks. The vulnerability exists in the IAO Service of Symantec Alert Management System 2 AMS2. The vulnerability is due to a boundary error ...
Microsoft PowerPoint Converter ExEmbed Record Stack Corruption (MS09-017; CVE-2009-1129)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted...
Oracle Secure Backup NDMP Packet Handling Multiple Denial of Service (CVE-2008-5441)
Oracle Database Server is an enterprise-level relational database application suite. Oracle Secure Backup is a backup solution allowing for single point of management of data present on network attached storage NAS devices and distributed hosts. Oracle Secure Backup is using NDMP protocol to...
Update Protection against HP OpenView Network Node Manager ovlaunch HTTP Request Buffer Overflow
A vulnerability was reported in HP OpenView Network Node Manager software. HP OpenView Network Node Manager NNM is a software application designed for management, maintenance and monitoring of networks and network devices. HP OpenView Network Node Manager NNM supplies several CGI applications wit...
Preemptive Protection against Free Download Manager Remote Control Server
A buffer overflow vulnerability was reported in Free Download Manager, a free download accelerator and manager. The vulnerability is caused due to a boundary error in the Remote Control Server when processing "Authorization" headers in HTTP requests. This issue can be triggered via an HTTP reques...
Microsoft Internet Explorer Uninitialized Memory Corruption (MS09-002; CVE-2009-0075)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may crea...
Update Protection against Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability
A vulnerability was reported in Trend Micro HouseCall . HouseCall is an application for checking whether your computer has been infected by viruses, spyware, or other malware. The vulnerability is caused by a use-after-free error in the HouseCall ActiveX control. This can be exploited to...
Microsoft Excel NAME Record Array Indexing Stack Corruption (MS08-074; CVE-2008-4266)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a stack corruption in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code on a...
Microsoft XML Core Services Chunked Request (MS08-069; CVE-2008-4033)
MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...
Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044; CVE-2008-1765; CVE-2008-3020)
BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...
IPS-1 Protection Updates for Vulnerabilities in Microsoft Windows and Asterisk and IPS-1 Protocol and Protocol Subsystems Updates
A buffer overflow vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code.The handleresponse function in Astersik allows allows remote attackers to cause a denial of service...
Microsoft Windows Kernel IGMPv3 Request Processing Code Execution (MS08-001; CVE-2007-0069)
The Internet Group Management Protocol IGMP is a communications protocol used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships. Overly long IGMP queries transmitted over a short period ...
Microsoft Windows UPnP Service Remote Code Execution (MS07-019; CVE-2007-1204)
The Universal Plug and Play UPnP service in Microsoft Windows is vulnerable to remote code execution. UPnP is a set of computer network protocols that extends Plug and Play to allow computers and devices to configure network services automatically. A remote attacker may exploit this issue to caus...
Security Best Practice: Enforcement of MS-RPC Protections over all TCP Ports
Remote Procedure Call RPC is a protocol that a program can use to request a service from a program located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. Microsoft Windows has reported multiple vulnerabilities MS05-039, MS05-043,...
Symantec Veritas Backup Exec Server Remote Registry Access (CAN-2005-0771)
...
Microsoft WINS Replication Attack (CVE-2004-1080)
...
Marval MSM Remote Code Execution (CVE-2022-31885)
A remote code execution vulnerability exists in Marval MSM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache httpd mod_proxy NULL Pointer Dereference (CVE-2021-44224)
A NULL pointer dereference vulnerability exists in the modproxy module of Apache httpd. The vulnerability is due to improper handling of malformed Request-URIs sent to servers configured as a forward proxy. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted...