13538 matches found
QNAP Qcenter Virtual Appliance Information Disclosure (CVE-2018-0706)
An Information disclosure vulnerability exists in QNAP Qcenter Virtual Appliance web console. Successful exploitation of this vulnerability would allow an authenticated user to obtain sensitive information...
RealNetworks RealPlayer Remote Code Execution (CVE-2004-1094) - Ver2
A remote code execution vulnerability exists in RealNetworks RealPlayer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office Graphics Remote Code Execution (CVE-2018-1028)
A remote code execution vulnerability exists in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HPE Intelligent Management Center mibFileServlet file Directory Traversal (CVE-2017-12559)
A directory traversal vulnerability exists in HPE Intelligent Management Center PLAT. The vulnerability is due to an input validation error in the mibFileServlet Servlet. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted packet to a vulnerable server...
Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16386)
A buffer over-read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to lack of bounds checking when XPS2PDF conversion engine handling specially crafted JEPG file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted XPS...
Cisco Prime Collaboration Provisioning logconfigtracer.jsp Arbitrary File Deletion (CVE-2017-6637)
An arbitrary file deletion vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted reques...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-11810)
A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Microsoft Internet Explorer handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Foxit Reader PDF Command Injection Remote Code Execution (CVE-2017-10951)
A remote code execution vulnerability has been reported in Foxit Reader. The vulnerability is due improper validation of a string before using it to execute a system call. A remote attacker could exploit this vulnerability by enticing a user to click a maliciously crafted file. Successful...
Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0014)
A remote code execution vulnerability exists in Windows Graphics Component. The vulnerability is due to the way Windows Graphics Component handles objects in memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...
Microsoft Browser Scripting Engine Memory Corruption (MS16-145: CVE-2016-7287)
A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
Adobe IExternalizable Interface Use After Free Code Execution (CVE-2016-7855)
A Use After Free vulnerability exists in Adobe IExternalizable Interface. The vulnerability is due to a reuse of a freed Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted SWF file...
HP LoadRunner Controller Scenario File Stack Buffer Overflow (CVE-2015-5426)
A stack-based buffer overflow vulnerability exists in HP LoadRunner Controller. The vulnerability is due to insufficient boundary checks while parsing scenario files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted ".lrs" files with the...
Microsoft Win32k Elevation of Privilege (MS16-039: CVE-2016-0165)
An elevation of privilege vulnerability exists in the Windows Kernel. The vulnerability is due to the way Windows deals with allocation of an Edge buffer. A remote attacker can exploit this vulnerability by running a specially crafted application...
Autodesk Design Review GIF GlobalColorTable DataSubBlock Buffer Overflow (CVE-2015-8572)
A heap buffer overflow vulnerability exists in Autodesk Design Review. The vulnerability is due to an error when processing GlobalColorTable flag and DataSubBlock size fields inside a GIF file. In order to exploit the vulnerability, the remote attacker needs to entice the target user to open a...
Unitronics VisiLogic OPLC TeeCommander ChartLink ActiveX Control Memory Corruption (CVE-2015-6478)
A memory corruption vulnerability exists in Unitronics VisiLogic OPLC. The vulnerability is due to untrusted pointer dereference on the ChartLink parameter of the TeeChart.TeeCommander ActiveX control. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6134)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer verifies an argument of a certain function. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page wi...
Microsoft Internet Explorer Information Disclosure (MS15-112: CVE-2015-6086)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling unsafe command line parameters. A remote attacker can exploit this issue by enticing a user to open a specially crafted...
IBM Lotus Domino BMP Color Palette Stack Buffer Overflow (CVE-2015-1903)
A stack buffer overflow vulnerability has been reported in IBM Lotus Domino. The vulnerability is due to improper bounds checking while parsing a BMP image with an overly large color palette. A remote attacker could trigger this flaw by sending a specially crafted BMP file...
Google Android Stagefright MP4 Multiple Atoms Integer Underflow (CVE-2015-1539; CVE-2015-3827)
A remote code execution vulnerability, known as Stagefright Vulnerability, has been reported in Android devices core. The vulnerability is due to an integer underflow condition in multiple MP4 atoms. Successful exploitation would allow an attacker to execute arbitrary code on the target system...
DIY-CMS blog mod SQL Injection (CVE-2011-5140)
An SQL injection vulnerability has been reported in DIY-CMS blog mod. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
LANDesk Management Suite Remote File Inclusion (CVE-2014-5362)
A remote file inclusion vulnerability has been reported in LANDesk Management Suite. The vulnerability is due to insufficient input validation in the HTTP path. A remote attacker could exploit the remote file inclusion vulnerability by enticing a user to click on a link with a malicious parameter...
Microsoft Internet Explorer MHTML Content Blocks Information Disclosure - Ver2 (CVE-2011-0096)
MHTML MIME Encapsulation of Aggregate HTML is an Internet standard that defines the MIME structure that is used to wrap HTML content. An information disclosure vulnerability has been reported in Microsoft Windows MHTML protocol. The vulnerability is due to the way MHTML interprets MIME-formatted...
PHP Core unserialize process nested data Use After Free - ver 2 (CVE-2014-8142; CVE-2015-0231)
A code execution vulnerability has been reported in PHP core. The vulnerability is due to a use after free error when handling serialized objects with identical number key names within the unserialize function. A remote attacker can exploit the vulnerability by sending crafted serialized data to ...
Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1623)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Schneider Electric ProClima ATX45 SetHtmlFileName Heap Buffer Overflow (CVE-2014-8511)
A code execution vulnerability has been reported in Schneider Electric ProClima. The vulnerability is due to a heap buffer overflow when processing user supplied parameter input to SetHtmlFileName in the Atx45.ocx ActiveX control. A remote unauthenticated attacker could exploit this vulnerability...
GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)
A buffer overflow vulnerability, known as GHOST Vulnerability, exists in GNU C Library function. A remote attacker can exploit this vulnerability by providing crafted input to an application that uses this vulnerable function. Successful exploitation could result in code execution in the context ...
Honeywell OPOS Suite Multiple ActiveX Controls Open Method Stack Buffer Overflow (CVE-2014-8269)
A buffer overflow vulnerability has been reported in Honeywell OPOS Suite. The vulnerability is due to improper bounds checking while processing the Open method calls within the HWOPOSScale.ocx ActiveX control and the HWOPOSSCANNER.ocx ActiveX control. An attacker can exploit this vulnerability b...
McAfee AntiVirus ZIP Archive Virus Detection Bypass attack - Ver2 (CVE-2004-0932)
A security bypass vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
IPSwitch IMAIL LDAP Overflow - Ver2 (CVE-2004-0297)
The LDAP protocol elements are encoded for exchange using ASN.1 Basic Encoding Rules BER. Buffer overflow vulnerabilities exist in the LDAP component of IPSwitch's IMail server. The vulnerable LDAP daemon does not properly validate the content of an LDAP message. The vulnerability allows both DoS...
Microsoft Movie Maker Project File Handling Buffer Overflow (MS10-016) - Ver2 (CVE-2010-0265)
Microsoft Movie Maker is a video creating/editing software, that contains features such as effects, transitions, titles/credits, audio track, and timeline narration. A buffer overflow vulnerability has been identified in Microsoft Movie Maker. The vulnerability is due to an error in Microsoft Mov...
DNS Label Compression Recursion Denial of Service - Ver2 (CVE-2007-1030)
A denial-of-service vulnerability has been reported in Niels Provos Libevent. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Symantec Workspace Streaming XML-RPC Arbitrary File Upload - Ver2 (CVE-2014-1649)
An arbitrary file upload vulnerability has been reported in Symantec Workspace. The vulnerability is due to lack of access control validation in the functionality used to process XMLRPC requests. A remote unauthenticated attacker could exploit this vulnerability by a sending specially crafted...
RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)
An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...
Joomla Component com_rokdownloads Local File Inclusion (CVE-2010-1056)
A file inclusion vulnerability has been reported in Joomla Com Rokdownloads. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HP Network Virtualization storedNtxFile Directory Traversal (CVE-2014-2625)
A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "storedNtxFile" method. A remote, unauthenticated attacker can leverage this vulnerability to gain access to sensitive informati...
Symantec Web Gateway dbutils.php SQL Injection (CVE-2014-1651)
An SQL injection vulnerability exists in Symantec Web Gateway. The vulnerability is due to lack of proper sanitization of the "hostname" HTTP parameter passed to some PHP pages. A remote, authenticated attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable...
Sophos Web Appliance SophosConfig Write Command Execution (CVE-2014-2850)
A command execution vulnerability has been reported in Sophos Web Appliance. The vulnerability is due to an error in the sanitization function. A remote authenticated attacker could exploit this vulnerability by placing specially crafted data in a request...
Apple Quicktime RTSP URL Buffer Overflow - Ver2 (CVE-2007-0015)
A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to lack of boundary checks when processing the "rtsp://" URLs. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Apple QuickTime QTVR QTVRStringAtom Parsing Buffer Overflow - Ver2 (CVE-2012-0667)
A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a signedness error when processing a specially crafted QTVR string. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cau...
Microsoft Excel SxView Record Parsing Memory Corruption (MS10-038) - Ver2 (CVE-2010-0821)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
EasyMail Object EMSMTP.DLL ActiveX Control Buffer Overflow - Ver2 (CVE-2007-4607)
A buffer overflow vulnerability has been reported in Quiksoft EasyMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Color Management Memory Allocation Buffer Overflow - Ver2 (CVE-2008-2245)
A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to a boundary error in the Microsoft Color Management System MSCMS module of the Microsoft Image Color Management ICM component. A remote attacker could exploit this vulnerability by persuading users ...
Microsoft PowerPoint TxMasterStyle10Atom Processing Code Execution (MS08-051) - Ver2 (CVE-2008-1455)
Microsoft PowerPoint is a popular presentation program. . A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory calculation error in Microsoft PowerPoint when parsing bullet list values in specially crafted PowerPoint files. A remo...
Wordpad and Windows Shell Com Validation Code Execution - Ver2 (CVE-2010-1263)
A code execution vulnerability has been reported in Microsoft Wordpad and Windows Shell. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel NAME Record Array Indexing Stack Buffer Corruption - Ver2 (CVE-2008-4266)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a stack corruption in Microsoft Excel when loading Excel records. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ghostscript Pdf parsing Buffer Overflow - Ver2 (CVE-2009-4897)
A buffer overflow vulnerability has been reported in Artifex AFPL Ghostscript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows GDI EMF Image File Handling Stack Buffer Overflow - Ver2 (CVE-2008-1087)
A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a stack overflow error when Microsoft GDI fails to properly process a malformed file name parameter in an EMF image files. Successful exploitation of this vulnerability could allow a remo...
Mozilla Firefox JavaScript Function focus Buffer Overflow - Ver2 (CVE-2006-1993)
The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. The browser application has a built-in JavaScript interpreter which also allows it to use the Document Object Model DOM, in particular ...