Microsoft SharePoint Server MAC Disabled Remote Code Execution (MS13-067; CVE-2013-1330)

A remote code execution vulnerability exists in Microsoft SharePoint Server...

Linux Kernel iscsi_add_notunderstood_response Heap Buffer Overflow (CVE-2013-2850)

A heap buffer overflow vulnerability has been reported in the Linux Kernel. The vulnerability is in the iscsiaddnotunderstoodresponse function in the iscsitarget driver and is due to the way a notunderstood response is created after processing very long keys. A remote, unauthenticated attacker ca...

InduSoft Web Studio Unauthenticated Insecure Remote Operations - High Confidence (CVE-2011-4051)

A code execution vulnerability has been reported in the Remote Agent component of InduSoft Web Studio. The vulnerability is due to the absence of authentication for incoming requests to the Remote Agent service. A remote, unauthenticated attacker could exploit this vulnerability by sending crafte...

Internet Explorer CCaret Use After Free Code Execution (MS13-021; CVE-2013-0090)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)

An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...

Portable SDK for UPnP Devices libupnp UUID Service Name Stack Buffer Overflow (CVE-2012-5959)

A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing UUID: service name URIs in the uniqueservicename function called from the SSDP protocol parser. Remote unauthenticated attackers can explo...

NFR Agent Heap Overflow (CVE-2012-4956)

...

Digium Asterisk IAX2 POKE Request Denial of Service (CVE-2008-3263)

A denial of service vulnerability has been reported in Digium Asterisk...

SCADA ICONICS WebHMI ActiveX Stack Overflow (CVE-2011-2089)

A code execution vulnerability exists in ICONICS WebHMI's ActiveX control. The vulnerability occurs in GenVersion.dll due to improper bounds checking before the input is copied onto the stack. A remote attacker could exploit this vulnerability by sending a long string of data to the...

EMC AutoStart ftAgent.exe Null Byte Write (CVE-2012-0409)

A memory corruption vulnerability has been reported in EMC AutoStart...

Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858)

A cross-site scripting vulnerability has been reported in Microsoft SharePoint...

IBM Rational ClearQuest CQOle ActiveX Code Execution (CVE-2012-0708)

A remote code execution vulnerability has been reported in IBM Rational ClearQuest...

Microsoft XML Core Services Remote Code Execution (KB2719615; CVE-2012-1889)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

HP OpenView Network Node Manager webappmon.exe Buffer Overflow (CVE-2011-3166)

A stack buffer overflow vulnerability has been reported in the HP OpenView Network Node Manager NNM. The vulnerability is due to a boundary error while handling certain parameters in a specially crafted HTTP request. A remote unauthenticated attacker can exploit this vulnerability by sending a...

Logitech VideoCall ActiveX Control Buffer Overflow (CVE-2007-2918)

A buffer overflow vulnerability has been reported in Logitech VideoCall. The vulnerability is due to a boundary error in an ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted web page. Successful...

Oracle GlassFish Server Invalid Username Cross Site Scripting (CVE-2011-2260)

A persistent cross-site scripting vulnerability has been reported in Oracle GlassFish Server. The vulnerability is due to insufficient input validation of username values. A remote attacker may exploit this vulnerability by sending a specially crafted POST request to an affected server. Successfu...

Microsoft Office Web Components URL Parsing Buffer Overflow (MS08-017; CVE-2006-4695)

A buffer overflow vulnerability has been reported in Microsoft Office Web Components. The vulnerability is due to improper handling of certain URLs. A remote attacker may exploit this vulnerability by enticing a target user to visit a malicious web-page. Successful exploitation would allow an...

HP OpenView Network Node Manager ovutil.dll stringToSeconds Buffer Overflow (CVE-2011-0262)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...

Microsoft Office Publisher pubconv.dll Size Value Heap Corruption (MS10-103; CVE-2010-2569)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...

Firebird Database Server Username Handling Buffer Overflow (CVE-2008-0467)

Firebird sometimes called FirebirdSQL is a relational database management system offering many ANSI SQL-2003 features. It runs on Linux, Windows, and a variety of Unix platforms. Started as a fork of Borland's open source release of InterBase, the Firebird codebase is maintained by the Firebird...

Adobe Shockwave Player IML32.dll Memory Corruption (APSB10-20; CVE-2010-2864)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Internet Explorer Location Uninitialized Memory Corruption (MS10-053; CVE-2010-2556)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...

Multiple PDF products Launch Action Command Code Execution (APSB10-15; CVE-2009-0836; CVE-2010-1240)

Portable Document Format PDF is an open file format created by Adobe Systems. A vulnerability has been discovered in Adobe Reader. The vulnerability is due to an error in the Adobe Reader that fails to restrict the contents of one text field in the Launch File warning dialog, which makes it easie...

Microsoft DirectShow Crafted MJPEG Stream Handling Code Execution (MS10-033; CVE-2010-1879)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. Audio Video Interleave AVI is a file type that is used with applications that capture, edit, and play back audio-video sequences. A remo...

Microsoft Excel HFPicture Record Stack Overflow (MS10-038; CVE-2010-1248)

Microsoft Excel is a popular spreadsheet application. A stack overflow vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw by...

Oracle Java Soundbank Resource Name Stack Buffer Overflow (CVE-2010-0839)

Java Technology is a programming platform which aims to provide a system for developing and deploying cross-platform applications. It is distributed in the form of various tools such as Java Runtime Environment JRE and Java Development Kit JDK. A stack buffer overflow vulnerability has been...

CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow (CVE-2008-2242)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP and IMAP protocols. There exists a buffer overflow vulnerability in IBM Lotus Notes Attachment Viewer...

Microsoft Office Publisher Invalid Memory Reference (MS08-012; CVE-2008-0102)

Microsoft Publisher is an application that allows users to design, layout, and format documents destined to be published in print, on the web, and various other formats. The main use of the application is in publishing brochures, advertisements, and other documents that require a greater degree o...

Digium Asterisk SIP sscanf Multiple Denial of Service (CVE-2009-2726)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

CA Message Queuing Buffer Overflow (CVE-2005-2668)

Computer Associates CA provides numerous product suites that provide network-monitoring functionality, manage network asset discovery, software deployment, and patch management. These capabilities are contained in the CA Unicenter product suites. The numerous components that are provided, contain...

Trend Micro Control Manager Chunked Overflow (CVE-2005-1929)

The Trend Micro Control Manager product is a centralized outbreak management console. It is meant to consolidate the coordination of outbreak security actions and the management of Trend Micro products and services. The product is a central command center for management of infections or...

Internet Explorer STYLE Object Remote Code Execution (CVE-2009-3672)

Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may create a...

CA Multiple Products DBASVR RPC Server Crafted Pointer Buffer Overflow (CVE-2007-5329)

CA BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases, and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a buffer overflow...

Adobe Flex SDK Cross-Site Scripting (APSB09-13; CVE-2009-1879)

An instance of a DOM-based Cross Site Scripting XSS vulnerability has been discovered in Adobe Flex SDK. Adobe Flex is a software development kit released by Adobe Systems for the development and deployment of cross-platform rich Internet applications based on the Adobe Flash platform. A remote...

Symantec Alert Management System Alert Originator Service Buffer Overflow (CVE-2009-1430)

Symantec System Center provides centralized systems and policy management for Norton Antivirus Enterprise Solution across multiple Windows NT and NetWare networks. The vulnerability exists in the IAO Service of Symantec Alert Management System 2 AMS2. The vulnerability is due to a boundary error ...

Update Protection against HP OpenView Network Node Manager ovlaunch HTTP Request Buffer Overflow

A vulnerability was reported in HP OpenView Network Node Manager software. HP OpenView Network Node Manager NNM is a software application designed for management, maintenance and monitoring of networks and network devices. HP OpenView Network Node Manager NNM supplies several CGI applications wit...

Sun Solstice AdminSuite sadmind Service adm_build_path Buffer Overflow (CVE-2008-4556)

Solstice AdminSuite is a set of applications for distributed system administration. sadmind is a daemon used by Solstice AdminSuite to control the servers running Sun Solaris operating system. A stack buffer overflow vulnerability has been reported in Solstice AdminSuite's sadmind. The...

WSX Files (CVE-2008-2253)

A server-side playlist SSPL is a list that identifies what content is played for a client, the time at which it is played, and the order in which it is played. WSX is a document used as SSPL by Windows Media server. A remote code execution vulnerability was reported in Windows Media Player 11. Th...

Preemptive Protection against HP OpenView Node Manager Remote Code Execution Vulnerability

HP OpenView Network Node Manager NNM is a software application designed for management, maintenance and monitoring of networks and network devices. The application fails to properly check crafted HTTP requests. By sending a specially-crafted overly long HTTP GET request, a remote unauthenticated...

MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050; CVE-2008-0082)

Windows Messenger, MSN Messenger, and Windows Live Messenger are popular instant messaging clients for Microsoft Windows. An information disclosure vulnerability exists in Windows Messenger, MSN Messenger, and Windows Live Messenger. The vulnerability is caused by an ActiveX control that is marke...

Microsoft Excel Rich Text Handling Code Execution (MS08-014; CVE-2008-0116; CVE-2009-0238)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a targe...

IPS-1 Protection Updates for Vulnerabilities in Microsoft Windows and Asterisk and IPS-1 Protocol and Protocol Subsystems Updates

A buffer overflow vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code.The handleresponse function in Astersik allows allows remote attackers to cause a denial of service...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Update Protection against Oracle Reports Arbitrary File Reading Vulnerability

Oracle Reports is an enterprise reporting tool that extracts data from multiple sources and inserts it into a formatted report. Oracle Reports fails to validate URI parameters, possibly allowing a remote attacker to read arbitrary files on the Reports Server...

NNTP (CVE-2004-0574; CVE-2005-1213)

...

Non Compliant IKE (CVE-2002-0852)

...

Foxit Reader Out-of-Bounds Read (CVE-2018-17686)

An out-of-bounds read vulnerability exists in Foxit Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Zoho ManageEngine SQL Injection (CVE-2021-40493)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the getDataCollectionFailureReason method...

Delta Industrial Automation DIAEnergie Arbitrary File Upload (CVE-2022-25347)

An arbitrary file upload vulnerability exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to an input validation error when processing file uploads...