13538 matches found
Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039) - Ver2 (CVE-2007-0040)
Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. Multiple vulnerabilities have been reported in Microsoft Windows Active Directory. The flaws are in the way the Active Directory handles LDAP requests. The...
Internet Explorer Center Element Remote Code Execution (MS12-037) - Ver2 (CVE-2012-1523)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has been deleted. A remote attacker could trigger this vulnerability by enticing an unsuspecting victim to open a...
CA ARCserve D2D GWT RPC Request Credentials Disclosure - Ver2 (CVE-2011-3011)
A credentials disclosure vulnerability has been reported in CA ARCserve D2D. The vulnerability is due to an error while processing Google Web Toolkit GWT RPC requests. A remote attacker can exploit this vulnerability by sending a specially crafted RPC request to an affected server. Successful...
Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056) - Ver2 (CVE-2009-2511)
The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and encoding to and decoding from Abstract Syntax Notation One ASN.1 to their Windows-based applications. A spoofing vulnerability has been reported i...
RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)
An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...
MovableType Unsanitized Input SQL Injection (CVE-2014-9057)
An SQL injection vulnerability was discovered in Movable Type. This vulnerability allows unauthenticated attackers to execute SQL code on the server...
AWStats configdir Parameter Remote Command Execution (CVE-2005-0116; CVE-2005-0362)
A command execution vulnerability has been reported in AWStats. The vulnerability is due to failing of AWStats CGI script to properly sanitize user provided parameters. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the target system...
AlienVault OSSIM Framework Backup Command Execution (CVE-2014-5158)
A command execution vulnerability exists in AlienVault OSSIM Framework. The vulnerability is due to insufficient sanitization of user supplied data that is used to execute backup commands. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...
HP Data Protector Opcode 1091 Directory Traversal (CVE-2014-5160)
A directory traversal vulnerability exists in HP Data Protector. The vulnerability is due to a lack of input sanitization allowing an attacker to create arbitrary files. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...
HP Network Virtualization storedNtxFile Directory Traversal (CVE-2014-2625)
A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "storedNtxFile" method. A remote, unauthenticated attacker can leverage this vulnerability to gain access to sensitive informati...
Adobe Acrobat and Reader Sandbox Bypass (APSB14-20; CVE-2014-0568)
A sandbox Security Bypass vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in the sandbox protection mechanism. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...
Web Servers VWar Remote File Inclusion (CVE-2006-1503)
A Remote File Inclusion vulnerability has been reported in VWar. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...
Microsoft Lync Server Information Disclosure (MS14-032; CVE-2014-1823)
An information disclosure vulnerability exists when Lync Server fails to properly sanitize specially crafted content. The vulnerability is caused when Lync Server does not properly sanitize specially crafted content. An attacker who successfully exploited this vulnerability could potentially...
OpenMediaVault Cron Remote Command Execution (CVE-2013-3632)
A security vulnerability was found in OpenMediaVault. OpenMediaVault allows an authenticated user to create cron jobs as arbitrary users on the system. An attacker can abuse this to run arbitrary commands as any user available on the system including root...
Sophos Web Appliance SophosConfig Write Command Execution (CVE-2014-2850)
A command execution vulnerability has been reported in Sophos Web Appliance. The vulnerability is due to an error in the sanitization function. A remote authenticated attacker could exploit this vulnerability by placing specially crafted data in a request...
Microsoft Excel FNGROUPNAME Record Uninitialized Memory Code Execution - Ver2 (CVE-2010-0262)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitra...
Microsoft Windows Compressed Folder Exploit Download Code Execution - Ver2 (CVE-2004-0575)
A code execution vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Symantec LiveUpdate Administrator Security Bypass (CVE-2014-1644)
A security policy bypass vulnerability exists in Symantec LiveUpdate Administrator. The vulnerability is due to a failure to validate temporary passwords when processing a user account password reset. A remote unauthenticated attacker could exploit this vulnerability by sending a malicious reques...
Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315)
A script injection and execution vulnerability has been reported in Movable Type. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary Perl code and SQL commands on the affected system...
Apple QuickTime STSD JPEG Atom Heap Corruption - Ver2 (CVE-2009-0007)
Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a heap buffer memory corruption vulnerability in Apple QuickTime. The vulnerability is due to lack...
Symantec Web Gateway blocked.php Blind SQL Injection - Ver2 (CVE-2012-2574)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Color Management Memory Allocation Buffer Overflow - Ver2 (CVE-2008-2245)
A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to a boundary error in the Microsoft Color Management System MSCMS module of the Microsoft Image Color Management ICM component. A remote attacker could exploit this vulnerability by persuading users ...
Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028) - Ver2 (CVE-2004-0200)
JPEG is a very popular image file format. Specially crafted JPEG files may be used to create a DoS condition and in some cases, arbitrary code execution...
Microsoft Word RTF Object Parsing Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4027)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory calculation error in Microsoft Word that fails to properly handle specially crafted control words in Rich Text Format .rtf files....
Microsoft Windows GDI EMF Image File Handling Stack Buffer Overflow - Ver2 (CVE-2008-1087)
A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a stack overflow error when Microsoft GDI fails to properly process a malformed file name parameter in an EMF image files. Successful exploitation of this vulnerability could allow a remo...
Microsoft PowerPoint RecolorInfo Atom Buffer Overrun (MS11-036) - Ver2 (CVE-2011-1270)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. . A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is caused when Microsoft...
Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0275)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
VEGO Web Forum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0067)
An SQL injection vulnerability has been reported in VEGO Links Builder. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)
A code execution vulnerability has been reported in Vincenzo Valvano Comet WebFileManager CWFM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Internet Explorer mdsauth.dll Arbitrary File Overwrite - Ver2 (CVE-2007-2221)
Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...
Apple QuickTime MJPEG Frame stsd Atom Heap Overflow (CVE-2013-1020)
A heap overflow vulnerability exists in Apple QuickTime...
Microsoft Internet Explorer Memory Corruption (MS13-080; CVE-2013-3897)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3144)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
HP Intelligent Management Center mibFileUpload Servlet Arbitrary File Upload (CVE-2012-5201)
An arbitrary file upload vulnerability exists in HP Intelligent Management Center...
Corel WordPerfect Document Processing Buffer Overflow (CVE-2012-4900)
A heap memory corruption vulnerability has been reported in Corel WordPerfect...
Linux Kernel iscsi_add_notunderstood_response Heap Buffer Overflow (CVE-2013-2850)
A heap buffer overflow vulnerability has been reported in the Linux Kernel. The vulnerability is in the iscsiaddnotunderstoodresponse function in the iscsitarget driver and is due to the way a notunderstood response is created after processing very long keys. A remote, unauthenticated attacker ca...
VideoLAN VLC Media Player PNG Code Execution - Improved Performance (CVE-2012-5470)
A code execution vulnerability has been reported in VLC Media Player. The vulnerability is due to an input validation error when handling certain PNG files. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted PNG file with a vulnerable version of VLC...
Microsoft Office OneNote Parsing Memory Information Disclosure (MS13-025; CVE-2013-0086)
An information disclosure vulnerability exists in the way that Microsoft OneNote allocates memory from parsing a specially crafted OneNote .ONE file...
Microsoft System Center Operations Manager Cross-Site Scripting (MS13-003; CVE-2013-0009)
A cross-site scripting vulnerability has been reported in Microsoft System Center Operations Manager...
HP Operations Agent Opcode 0x34 Stack Buffer Overflow (CVE-2012-2019)
A stack-based buffer overflow vulnerability has been reported in HP Operations Agent...
Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858)
A cross-site scripting vulnerability has been reported in Microsoft SharePoint...
WellinTech Kingview SCADA Heap Buffer Overflow (CVE-2011-4536)
A buffer overflow vulnerability has been reported in WellinTech KingView...
Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow (CVE-2011-3834)
A remote code execution vulnerability has been reported in Nullsoft Winamp...
HP Easy Printer Care ActiveX Control Directory Traversal (CVE-2011-4786)
A directory traversal vulnerability has been reported in HP Easy Printer Care. The vulnerability is due to a lack of sanitization in the HPESPRIT.XMLCacheMgr.1 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page...
Microsoft WINS Local Elevation of Privilege (MS11-070; CVE-2011-1984)
An elevation of privilege vulnerability has been reported in Microsoft WINS. A local attacker could exploit this vulnerability to execute arbitrary code in an affected local system. The vulnerability is due to an error in the way WINS server processes a sequence of specially crafted packets...
Microsoft Excel 4.0 Workbook file detected
A remote code execution vulnerability has been reported in Microsoft Excel. A remote attacker could exploit this vulnerability to execute arbitrary code in an affected system...
Microsoft Host Integration Server snabase.exe Denial of Service (CVE-2011-2007)
A denial of service DoS vulnerability has been reported in Microsoft Host Integration Server HIS. HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging and...
Preemptive Protection Against EMC NetWorker librpc.dll Security Check Bypass (CVE-2011-0321)
A security bypass vulnerability exists in EMC Legato Networker...
Preemptive Protection against Internet Explorer XSLT Object Memory Corruption (MS11-057; CVE-2011-1963)
A memory corruption vulnerability has been reported in an XSLT object within Microsoft Internet Explorer. A remote attacker can leverage this vulnerability to execute arbitrary code on an affected system, within the security context of the logged in user...