13538 matches found
MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050) - Ver2 (CVE-2008-0082)
Windows Messenger, MSN Messenger, and Windows Live Messenger are popular instant messaging clients for Microsoft Windows. An information disclosure vulnerability exists in Windows Messenger, MSN Messenger, and Windows Live Messenger. The vulnerability is caused by an ActiveX control that is marke...
Symantec Web Gateway blocked.php Blind SQL Injection - Ver2 (CVE-2012-2574)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Windows GDI EMF Image File Handling Stack Buffer Overflow - Ver2 (CVE-2008-1087)
A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a stack overflow error when Microsoft GDI fails to properly process a malformed file name parameter in an EMF image files. Successful exploitation of this vulnerability could allow a remo...
Microsoft Word File Handling Memory Corruption (MS08-009) - ver 2 (CVE-2008-0109)
Microsoft Word is a popular word processor. By sending a specially crafted Word document, an attacker can cause a memory corruption, and remotely execute arbitrary code on the affected system...
Novell NeaatIdentity RPC Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)
A code execution vulnerability has been reported in Novell Client NetIdentity Agent. The vulnerability is due to insufficient sanity check when processing crafted RPC messages. A remote attacker could exploit this vulnerability by sending a specially crafted RPC message to the affected service...
Postguestbook CONF_CONFIG_PATH Parameter PHP Code Execution - Ver2 (CVE-2007-1372)
A code execution vulnerability has been reported in Postguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer HTML Object Use After Free - Ver2 (CVE-2010-0248)
A use-after-free vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker could trigger this vulnerability by accessing an object that was...
Microsoft IIS ASP Engine HTMLEncode Buffer Overflow - Ver2 (CVE-2008-0075)
A buffer overflow vulnerability has been reported in the Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Orbit Downloader Long URL Stack Buffer Overflow - Ver2 (CVE-2009-0187)
Orbit Downloader, developed by Orbit Downloader Team, is a graphical download manager for Microsoft Windows operating system. Orbit Downloader works with all major browsers like Opera, Mozilla Firefox, Microsoft Internet Explorer, Maxthon, and Netscape. A buffer overflow vulnerability exists in...
Internet Explorer mdsauth.dll Arbitrary File Overwrite - Ver2 (CVE-2007-2221)
Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...
Novell Client NetIdentity Agent Remote Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)
The Novell NetIdentity agent works with eDirectory authentication to provide background authentication to Windows Web-based applications that require eDirectory authentication, such as iPrint, Novell Portal Services, eGuide, Novell NetIdentity, ZENworks, NetStorage, and iManager. NetIdentity...
HP LoadRunner micWebAjax.dll ActiveX Control Stack Buffer Overflow (CVE-2013-2368)
A stack buffer overflow vulnerability has been reported in HP LoadRunner...
3S Smart Software Solutions CoDeSys Gateway Server Stack Buffer Overflow (CVE-2012-4708)
A stack buffer overflow vulnerability has been reported in 3S Smart Software CoDeSys...
IBM SPSS SamplePower c1sizer ActiveX Control Buffer Overflow (CVE-2012-5946)
A heap-based buffer overflow vulnerability exists in IBM SPSS SamplePower...
Microsoft HTML Sanitization Cross Site Scripting (MS13-035) - High Confidence (CVE-2013-1289)
A cross-site scripting vulnerability has been reported in multiple Microsoft products. The flaw is due to the way that the applications sanitize HTML. Remote attackers can exploit this vulnerability by submitting crafted HTML to the vulnerable server that uses the HTML Sanitization library, and...
Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...
Portable SDK for UPnP Devices libupnp UUID Service Name Stack Buffer Overflow (CVE-2012-5959)
A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing UUID: service name URIs in the uniqueservicename function called from the SSDP protocol parser. Remote unauthenticated attackers can explo...
EMC AlphaStor Device Manager Command Injection - Improved performance (CVE-2013-0928)
A remote command execution vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious request containing a specially crafted parameter to the target server. Successful...
Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)
A cross-site-scripting vulnerability has been reported in Trend Micro InterScan Messaging Security Suite...
Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)
A buffer overflow vulnerability has been reported in Apple QuickTime...
IBM Rational ClearQuest CQOle ActiveX Code Execution (CVE-2012-0708)
A remote code execution vulnerability has been reported in IBM Rational ClearQuest...
Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow (CVE-2011-3834)
A remote code execution vulnerability has been reported in Nullsoft Winamp...
EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395)
A buffer overflow vulnerability has been reported in EMC NetWorker...
Preemptive Protection against Freefloat FTP Server Invalid Command Buffer Overflow (CVE-2005-0696; CVE-2005-3683)
A buffer overflow vulnerability has been reported in Freefloat FTP Server...
Microsoft Office Web Components URL Parsing Buffer Overflow (MS08-017; CVE-2006-4695)
A buffer overflow vulnerability has been reported in Microsoft Office Web Components. The vulnerability is due to improper handling of certain URLs. A remote attacker may exploit this vulnerability by enticing a target user to visit a malicious web-page. Successful exploitation would allow an...
Preemptive Protection against Internet Explorer XSLT Object Memory Corruption (MS11-057; CVE-2011-1963)
A memory corruption vulnerability has been reported in an XSLT object within Microsoft Internet Explorer. A remote attacker can leverage this vulnerability to execute arbitrary code on an affected system, within the security context of the logged in user...
Microsoft Excel SLK File Parsing Code Execution (MS11-045; CVE-2011-1276)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the SLK file format. A remote attacker could trigger this flaw by...
Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow (CVE-2010-3974; CVE-2010-4701)
A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...
Firebird Database Server Username Handling Buffer Overflow (CVE-2008-0467)
Firebird sometimes called FirebirdSQL is a relational database management system offering many ANSI SQL-2003 features. It runs on Linux, Windows, and a variety of Unix platforms. Started as a fork of Borland's open source release of InterBase, the Firebird codebase is maintained by the Firebird...
Microsoft OpenType Font Validation Elevation of Privilege (MS10-078; CVE-2010-2741)
OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. An elevation of privilege vulnerability has been reported in the...
Sun Java Runtime Environment JAR File Processing Stack Buffer Overflow (CVE-2008-5354)
Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...
Multiple PDF products Launch Action Command Code Execution (APSB10-15; CVE-2009-0836; CVE-2010-1240)
Portable Document Format PDF is an open file format created by Adobe Systems. A vulnerability has been discovered in Adobe Reader. The vulnerability is due to an error in the Adobe Reader that fails to restrict the contents of one text field in the Launch File warning dialog, which makes it easie...
Apple Quicktime Heap Overflow (CVE-2004-0431)
There is an integer overflow in the media file parsing mechanism within Apple QuickTime, a tool that allows users to play, create, and deliver multimedia. There is a vulnerability in the media file parser within Apple QuickTime. It is possible for a remote attacker to execute arbitrary code on th...
Adobe Pagemaker MAIPM6.DLL Long Font Name Buffer Overflow (CVE-2007-5169)
Adobe PageMaker software is a page layout program. Adobe PageMaker native documents have file extension PMD. The data is stored using the Microsoft's proprietary Compound Document Object format, also called the OLE 2.0 docfile format. In this format, objects are stored inside streams. A directory...
Microsoft Excel DbOrParamQry Record Parsing Code Execution (MS10-017; CVE-2010-0264)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...
Internet Explorer WMF Image Parsing Memory Corruption (CVE-2006-0020)
The Windows Metafile WMF is a standard Windows image file format. It consists of a set of graphics functions and parameters that describe the steps required to render an image. WMF is a 16-bit format that can contain both vector and bitmap information. A WMF file contains a main header, followed ...
Microsoft Distributed Transaction Controller Denial of Service (MS05-051; CVE-2005-1979)
The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...
Preemptive Protection against HP OpenView Network Node Manager nnmRptConfig.exe Template Buffer Overflow Vulnerability
A stack buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM CGI program nnmRptConfig.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to...
Internet Explorer Malformed Request Header Information Disclosure (MS08-031; CVE-2008-1544)
An information disclosure vulnerability has been reported in the way that Internet Explorer handles certain request headers. The vulnerability is due to an error in Internet Explorer that incorrectly parses a specially crafted request header, allowing a violation of the same origin policy. To...
Oracle Database Server DBMS_AQELM Package Buffer Overflow (CVE-2008-2607)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
HP OpenView Network Node Manager HTTP Handling Buffer Overflow (CVE-2008-1697)
HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, for example: OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. There exists a buffer...
Oracle Database Server ctxsys.driload Access Validation (CVE-2004-0637)
Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...
MySQL XML Functions Scalar XPath Denial of Service (CVE-2009-0819)
MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. MySQL Server...
Microsoft .NET Framework Type Verification Error (MS09-061; CVE-2009-0090; CVE-2009-0091)
The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...
HP StorageWorks Storage Mirroring Double Take Service Code Execution (CVE-2008-1661)
HP StorageWorks is a collection of storage solutions from Hewlett Packard. These solutions include online storage, nearline storage, storage networking , archiving, and storage software. One of the storage software solutions is the Storage Mirroring Software. HP StorageWorks Storage Mirroring...
GNU Radius SQL Accounting Format String (CVE-2006-4181)
GNU Radius is a suite of applications which perform user authentication and accounting using the Remote Authentication Dial In User Service RADIUS protocol. The RADIUS protocol is specifically designed for authentication, authorization and accounting of various network services. RADIUS is most...
Internet Explorer DirectAnimation COM Object Memory Corruption (MS06-042; CVE-2006-3638)
Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating a COM objec...
Novell eDirectory Management Console Accept-Language Buffer Overflow (CVE-2009-0192)
Novell eDirectory is an X.500 and LDAP compatible directory service software product. It is developed by Novell, Inc. for centrally managing access to resources on multiple servers and computers within a given network. The product is made available for multiple platforms including NetWare,...
Preemptive Protection against Microsoft GDI+ PNG Heap Overflow Vulnerability (MS09-062)
A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...
Ipswitch WhatsUp Gold DOS Device HTTP Request Denial of Service (CVE-2004-0799)
WhatsUp is a network management and monitoring application developed by Ipswitch Inc. It has a built-in web server to enable remote access to the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold processes a request that contains a special device nam...