13538 matches found
Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2458)
Remote code execution vulnerabilities exist in Microsoft Windows. The vulnerability is due to an error in the way Microsoft Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. A remote attacker can exploit this issue by enticing a victim to open a specially...
Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2406)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Adobe Acrobat and Reader API Calls Code Execution (APSB15-10: CVE-2015-3064; CVE-2015-3061; CVE-2015-3063)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially craft...
VMware ESX and ESXi Server SOAP Request Handling Denial Of Service - Ver2 (CVE-2012-5703)
A denial of service vulnerability exists in VMware ESX and ESXi server. The vulnerability is due to improper handling of certain SOAP requests in the vSphere API. A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted messages to the affected server...
Microsoft Office Memory Corruption (MS15-033: CVE-2015-1641)
A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a...
Microsoft Windows HTTP.sys Remote Code Execution (MS15-034: CVE-2015-1635)
A remote code execution vulnerability has been reported in Windows OS. The vulnerability is due to an error in the way HTTP.sys handles a malicious HTTP header. Successful exploitation would result in a remote code execution...
Microsoft Internet Explorer Data Binding Memory Corruption - Ver2 (CVE-2008-4844)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow - Ver2 (CVE-2010-3974)
A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...
Oracle Database Client System Analyzer Arbitrary File Upload Code Execution - Ver2 (CVE-2010-3600)
A code execution vulnerability has been reported in Oracle Enterprise Manager Grid Control and Oracle Database Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WebGate WESPSDK WESPDiscovery Stack Buffer Overflow (CVE-2015-2100)
A code execution vulnerability exists in WebGate WESPSDK that is shipped with multiple WebGate products. The vulnerability is due to a stack buffer overflow in the TCPDiscovery and TCPDiscovery2 methods of the WESPDiscovery.WESPDiscoveryCtrl ActiveX control. A remote attacker could exploit this...
Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)
Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...
Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007) - Ver2 (CVE-2012-0007)
An information disclosure vulnerability has been reported in the Microsoft Anti-Cross Site Scripting AntiXSS Library. The vulnerability is due to the way the AntiXSS Library incorrectly evaluates certain characters after a CSS escaped character is detected. A remote attacker may exploit this issu...
Internet Explorer HTML Help Remote Code Execution (MS05-001) - Ver2 (CVE-2004-1043)
Microsoft Internet Explorer executes with the concept of security zones, which enables the browser to apply different security policies based on the origin of the file that is being rendered. For instance, separate restrictions may be set for remote content and for local content. As a rule,...
McAfee ePolicy Orchestrator XML Entity Injection (CVE-2015-0921)
An XML External Entity vulnerability has been reported in McAfee ePolicy Orchestrator ePO. The vulnerability is due to an input validation error in the ePO-web application. A remote attacker can exploit this vulnerability by sending a maliciously crafted XML dashboard definition...
Microsoft Word OneTableDocumentStream Remote Code Execution (MS15-012; CVE-2015-0065)
A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially craft...
GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)
A buffer overflow vulnerability, known as GHOST Vulnerability, exists in GNU C Library function. A remote attacker can exploit this vulnerability by providing crafted input to an application that uses this vulnerable function. Successful exploitation could result in code execution in the context ...
Microsoft PowerPoint Converter TPrint Record Handling Error (MS09-017) - Ver2 (CVE-2009-0227)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overrun vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafte...
InterNetNews Control Message Handling Buffer Overflow - Ver2 (CVE-2004-0045)
The InterNetNews package INN is a complete Usenet system. It includes innd, an NNTP server, and nnrpd, a newsreading server. A vulnerability exists in the NNTP server component of InterNetNews INN, which can be exploited to compromise a vulnerable system. The vulnerability is caused due to a...
Internet Explorer Center Element Remote Code Execution (MS12-037) - Ver2 (CVE-2012-1523)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has been deleted. A remote attacker could trigger this vulnerability by enticing an unsuspecting victim to open a...
Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056) - Ver2 (CVE-2009-2511)
The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and encoding to and decoding from Abstract Syntax Notation One ASN.1 to their Windows-based applications. A spoofing vulnerability has been reported i...
MovableType Unsanitized Input SQL Injection (CVE-2014-9057)
An SQL injection vulnerability was discovered in Movable Type. This vulnerability allows unauthenticated attackers to execute SQL code on the server...
Microsoft Windows SChannel Buffer Overflow (MS14-066; CVE-2014-6321)
A remote code execution vulnerability exists in Microsoft SChannel. The vulnerability is due to improper processing of specially crafted packets that leads to a buffer overflow. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted packets to the target...
HP Data Protector Opcode 1091 Directory Traversal (CVE-2014-5160)
A directory traversal vulnerability exists in HP Data Protector. The vulnerability is due to a lack of input sanitization allowing an attacker to create arbitrary files. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...
HP Network Virtualization storedNtxFile Directory Traversal (CVE-2014-2625)
A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "storedNtxFile" method. A remote, unauthenticated attacker can leverage this vulnerability to gain access to sensitive informati...
Web Servers VWar Remote File Inclusion (CVE-2006-1503)
A Remote File Inclusion vulnerability has been reported in VWar. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...
Oracle Data Quality PostcardPreviewInt onclose Untrusted Pointer Dereference (CVE-2014-2415)
A remote code execution vulnerability exists in Oracle Data Profiling and Data Quality for Data Integrator. The vulnerability is due to dereferencing an arbitrary pointer within the TSS12.TransformerTools.PostcardPreviewInt ActiveX control. A remote attacker can exploit this vulnerability by...
Microsoft Lync Server Information Disclosure (MS14-032; CVE-2014-1823)
An information disclosure vulnerability exists when Lync Server fails to properly sanitize specially crafted content. The vulnerability is caused when Lync Server does not properly sanitize specially crafted content. An attacker who successfully exploited this vulnerability could potentially...
Katello update_roles Privilege Escalation (CVE-2013-2143)
A privilege escalation vulnerability has been reported in Katello. The vulnerability is due to a missing authorization at the "updateroles" action of "users" controller. A remote authenticated attacker may exploit this vulnerability to gain administrator privileges...
Sophos Web Appliance SophosConfig Write Command Execution (CVE-2014-2850)
A command execution vulnerability has been reported in Sophos Web Appliance. The vulnerability is due to an error in the sanitization function. A remote authenticated attacker could exploit this vulnerability by placing specially crafted data in a request...
Microsoft Windows Compressed Folder Exploit Download Code Execution - Ver2 (CVE-2004-0575)
A code execution vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Memory Corruption (MS14-018: CVE-2014-1755)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Windows Shell MSHTA Script Execution in OLE Files (MS05-016) - Ver2 (CVE-2005-0063)
The Windows operating system provides facilities that make it possible to invoke different applications to handle different types of files. This makes it possible for a user to double click on a known image type file, for instance, and by that action launch the proper application to display or ed...
EasyMail Object EMSMTP.DLL ActiveX Control Buffer Overflow - Ver2 (CVE-2007-4607)
A buffer overflow vulnerability has been reported in Quiksoft EasyMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
GDI WMF File Rendering Code Execution - Ver2 (CVE-2005-2124)
A code execution vulnerability has been reported in Microsoft GDI. An attacker could exploit this vulnerability via a crafted Windows Metafile WMF format image. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315)
A script injection and execution vulnerability has been reported in Movable Type. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary Perl code and SQL commands on the affected system...
Bharat Mediratta Gallery captionator.php GALLERY_BASEDIR Parameter PHP Code Execution - Ver2 (CVE-2002-1412)
A code execution vulnerability has been reported in Gallery Project Gallery. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CSGuestbook csGuestbook.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1750)
A code execution vulnerability has been reported in Cgiscript.net Csguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apple QuickTime STSD JPEG Atom Heap Corruption - Ver2 (CVE-2009-0007)
Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a heap buffer memory corruption vulnerability in Apple QuickTime. The vulnerability is due to lack...
PHP GLOBALS Remote File Inclusion (CVE-2006-4966)
A Remote File Inclusion vulnerability has been reported in chumpsoft phpQuestionnaire. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This...
Microsoft Color Management Memory Allocation Buffer Overflow - Ver2 (CVE-2008-2245)
A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to a boundary error in the Microsoft Color Management System MSCMS module of the Microsoft Image Color Management ICM component. A remote attacker could exploit this vulnerability by persuading users ...
Microsoft PowerPoint Notes Record Parsing Heap Corruption (MS09-017) - Ver2 (CVE-2009-1130)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A heap corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading a malformed structure value in a...
Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028) - Ver2 (CVE-2004-0200)
JPEG is a very popular image file format. Specially crafted JPEG files may be used to create a DoS condition and in some cases, arbitrary code execution...
Microsoft Word RTF Object Parsing Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4027)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory calculation error in Microsoft Word that fails to properly handle specially crafted control words in Rich Text Format .rtf files....
CS Chat-r-box csChatRBox.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1752)
A code execution vulnerability has been reported in Cgiscript.net Cschat-r-box. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft PowerPoint RecolorInfo Atom Buffer Overrun (MS11-036) - Ver2 (CVE-2011-1270)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. . A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is caused when Microsoft...
Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0275)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
Postguestbook CONF_CONFIG_PATH Parameter PHP Code Execution - Ver2 (CVE-2007-1372)
A code execution vulnerability has been reported in Postguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)
A code execution vulnerability has been reported in Vincenzo Valvano Comet WebFileManager CWFM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...