13538 matches found
Microsoft Office Excel Record Type Confusion Code Execution - Ver2 (CVE-2011-1273)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to improper parsing of certain records leading to type confusion while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execut...
PointDev IDEAL Migration and Administration Buffer Overflow - Ver2 (CVE-2009-4265)
A buffer overflow vulnerability has been reported in Pointdev Ideal Administration. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Adobe Photoshop Tiff File RLE Compression Buffer Overflow - Ver2 (CVE-2012-2027)
A buffer overflow vulnerability has been reported in Adobe Photoshop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08) - Ver2 (CVE-2012-0774)
A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Bharat Mediratta Gallery captionator.php GALLERY_BASEDIR Parameter PHP Code Execution - Ver2 (CVE-2002-1412)
A code execution vulnerability has been reported in Gallery Project Gallery. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Shell MSHTA Script Execution in OLE Files (MS05-016) - Ver2 (CVE-2005-0063)
The Windows operating system provides facilities that make it possible to invoke different applications to handle different types of files. This makes it possible for a user to double click on a known image type file, for instance, and by that action launch the proper application to display or ed...
FreeBSD bsnmpd GETBULK PDU Stack Buffer Overflow - ver 2 (CVE-2014-1452)
A remote code execution vulnerability exists in the FreeBSD. The vulnerability is caused due to improper handling of crafted GETBULK PDU requests. A remote, unauthenticated attacker can exploit these vulnerabilities to execute arbitrary code on the target system within the security context of...
Microsoft Color Management Memory Allocation Buffer Overflow - Ver2 (CVE-2008-2245)
A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to a boundary error in the Microsoft Color Management System MSCMS module of the Microsoft Image Color Management ICM component. A remote attacker could exploit this vulnerability by persuading users ...
Mozilla Firefox JavaScript Function focus Buffer Overflow - Ver2 (CVE-2006-1993)
The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. The browser application has a built-in JavaScript interpreter which also allows it to use the Document Object Model DOM, in particular ...
Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0276)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
VERITAS NetBackup vmd Shared Library Buffer Overflow - ver 2 (CVE-2005-3116)
The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...
Microsoft Windows NDProxy.sys Elevation of Privilege (CVE-2013-5065)
An elevation of privilege vulnerability has been reported in Microsoft Windows...
Siemens Simatic SCADA WINCC SQL Insecure Default Credentials Security Bypass (CVE-2010-2772)
A security bypass vulnerability has been reported in Siemens SIMATIC WinCC server. A remote attacker can exploit this issue by using the default hard-coded password to bypass certain security restrictions and gain access to the application's database...
BlackHole Toolkit v2 JAVA Payload Stage Code Execution (CVE-2012-0507; CVE-2012-1723; CVE-2013-0422; CVE-2013-0431; CVE-2013-1493)
BlackHole is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with BlackHole by enticing them to visit a malicious web page. Successful infection will allow the attacker to download additional malware to the target...
TP-Link Wireless Lite N Access Point Directory Traversal (CVE-2012-5687)
A directory traversal vulnerability has been reported in TP-LINK TL-WR841N Wireless Router Web-Based Management. The vulnerability is due to lack of sanitization of the URL paramaters. A remote attacker can exploit this issue by viewing the router configuration and password files...
Microsoft SharePoint Server Parameter Injection (MS13-084; CVE-2013-3895)
An elevation of privilege vulnerability exists in Microsoft SharePoint Server...
Microsoft Windows SMB Response Handling Buffer Overflow (CVE-2005-0045)
A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client component. A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system. Successful exploitation would allow an attacker to take comple...
Microsoft DirectAccess ICMP Denial of Service (MS13-064; CVE-2013-3182)
A denial of service vulnerability has been reported in Windows 2012 server...
Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3146)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
Schneider Electric Accutech Manager HTTP Request Processing Buffer Overflow (CVE-2013-0658)
A buffer overflow vulnerability has been reported in Schneider Electric Accutech Manager...
Microsoft Office PNG File Parsing Buffer Overflow (MS13-051; CVE-2013-1331)
A remote code execution vulnerability has been reported in Microsoft Office...
Microsoft Windows Remote Desktop Protocol Denial of Service (MS05-041) - High Confidence (CVE-2005-1218)
A vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP. Remote Desktop Protocol RDP lets users create a virtual session on their desktop computers, allowing them to access all the data and applications on their computers. To trigger the vulnerability, an attacker could send a...
Microsoft Visio SVG File Information Disclosure (MS13-044; CVE-2013-1301)
An information disclosure vulnerability has been reported in Microsoft Visio. The vulnerability is caused when Microsoft Visio improperly handles XML external entities that are resolved within other XML external entity declarations. An attacker who successfully exploited this vulnerability could...
Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524) - high confidence
An elevation of privilege vulnerability has been discovered in the Microsoft Windows Local Security Authority Subsystem Service LSASS. The vulnerability is due to the Windows NTLM implementation in LSASS improper handling of malformed packets during NTLM authentication. A remote attacker could...
Microsoft HTML Sanitization Cross Site Scripting (MS13-035; CVE-2013-1289)
An elevation of privilege vulnerability exists in the way that HTML strings are sanitized. Successful exploitation could allow an attacker to perform cross-site scripting attacks against affected users, resulting in script execution in the target's security context...
Internet Explorer PNG Image Rendering Memory Corruption - improved performance (MS05-025; CVE-2005-1211; CVE-2006-0025)
Portable Network Graphics PNG is a popular image file format. Specially crafted PNG files may be used to create a DoS condition and in some cases, arbitrary code execution...
IBM Java Multiple Packages Sandbox Breach (CVE-2012-4822)
A sandbox breach vulnerability has been reported in IBM Java. The vulnerability is due to insecure use of certain methods in java.lang.class by IBM Java packages. An unauthenticated remote attacker can exploit this vulnerability by enticing the target user to open a crafted web page. Successful...
Internet Explorer CCaret Use After Free Code Execution (MS13-021; CVE-2013-0090)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
SAP NetWeaver DiagiEventSource Denial of Service (CVE-2012-2514)
A denial of service vulnerability has been reported in SAP NetWeaver's Dispatcher service...
Oracle Database TNS Listener Service Registration Authentication Weakness (CVE-2012-1675)
An authentication weakness vulnerability has been reported in Oracle Database's TNS listener component...
WellinTech Kingview SCADA Heap Buffer Overflow (CVE-2011-4536)
A buffer overflow vulnerability has been reported in WellinTech KingView...
Cisco WebEx Player Malformed .WRF File Code Execution (CVE-2010-3269)
A stack buffer overflow has been reported in Cisco WebEx Player...
Microsoft Exchange Server IMAP Command Denial of Service (MS07-026; CVE-2007-0221)
An integer overflow vulnerability has been reported in Microsoft Exchange Server...
Apple Safari file URL Arbitrary Code Execution (CVE-2011-3230)
A remote code execution vulnerability has been reported in Apple Safari. The vulnerability is due to an error in Apple Safari while handling of file:// URLs. A remote attacker can exploit this vulnerability to execute arbitrary code...
Microsoft Internet Explorer Element Index Memory Corruption (MS11-081; CVE-2011-1999)
A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due an error in Internet Explorer when validating the integrity of certain DOM elements. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful...
Preemptive Protection against Microsoft Active Directory Certificate Services Cross-Site Scripting (MS11-051; CVE-2011-1264)
A cross-site scripting vulnerability has been reported in Microsoft Active Directory Certificate Services...
Microsoft PowerPoint .dll Insecure Library Loading (MS11-073; CVE-2011-1980)
The vulnerability is due to insecure library loading issue in Microsoft PowerPoint. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted PowerPoint file. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system...
Amaya Browser BDO Tag Buffer Overflow (CVE-2009-0323)
A buffer overflow vulnerability has been reported in Amaya web browser. Amaya is an open source web authoring and browsing tool which is mainly used as a test bed for web standards. The vulnerability is due to an error in the way the browser parses HTML files with specially crafted BDO tags. A...
Adobe Shockwave Director tSAC Chunk Invalid Seek Memory Corruption (CVE-2010-2875)
Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...
Microsoft Internet Explorer JPEG Rendering Buffer Overflow (MS05-038; CVE-2005-1988; CVE-2005-2308)
The Microsoft Internet Explorer supports the rendering of Joint Photographic Experts Group JPEG images in HTML pages. A buffer overflow vulnerability has been reported in the Microsoft Internet Explorer JPEG image rendering component. The vulnerability is due to the improper validation of user...
HP OpenView Network Node Manager ovutil.dll stringToSeconds Buffer Overflow (CVE-2011-0262)
The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...
Microsoft Office Publisher Array Indexing Memory Corruption (MS10-103; CVE-2010-3955)
Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more A remote attacker can exploit this issue via a specially crafted Publisher file. Successful exploitation may allow execution of arbitrary code on the vulnerable system. The...
Symantec IM Manager rdpageimlogic.aspx Multiple SQL Injections (CVE-2010-0112)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...
Microsoft PowerPoint DLL Planting Code Execution (MS10-087; CVE-2010-3337)
Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A memory corruption vulnerability has been identified in the way that Microsoft Office handles the loading of DLL files. This vulnerability...
Internet Explorer toStaticHTML API Cross-Site-Scripting (MS10-072; CVE-2010-3324)
Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. An information disclosure vulnerability has been reported in the way that the toStaticHTML API sanitizes HTML. The vulnerability is due to the way that Internet Explorer handles content using specific...
Update Protection against Synology Disk Station FTP Login Web Commands Injection Vulnerability
A remote command injection vulnerability has been discovered in Synology Disk Station. The Synology Disk Station is a product designed for storage purposes of small offices or home users. It supports several terabytes of total storage. A remote attacker may exploit this vulnerability to execute...
Sun Directory Server LDAP Denial of Service (CVE-2006-0647)
Sun Directory Server is a distributed directory server based on the Lightweight Directory Access Protocol LDAP. The server listens for LDAP requests on a port specified during installation. The default port assigned to the server during installation is randomly selected. There exists a...
Embedded Base-64 Encoded TTF Files (CVE-2010-2738)
Unicode Script Processor is a Windows component that enables a text layout client to format complex scripts. A remote code execution vulnerability has been reported in the way affected versions of Microsoft Windows incorrectly parse specific font types. A remote attacker could exploit this issue...
RealNetworks RealPlayer FLV Parsing Multiple Integer Overflows (CVE-2010-3000)
RealPlayer is a media player application developed by RealNetworks Inc. This application is capable of playing back numerous multimedia file formats and can open media files from local file system or network servers. RealPlayer has an extensible nature that allows it to handle different media fil...
Preemptive Protection against Apple Mac OS X CoreGraphics Heap Overflow Vulnerability
A heap buffer overflow Vulnerability has been discovered in Apple CoreGraphics. CoreGraphics refers to a pair of Mac OS X technologies, each part of the CoreGraphics framework: Quartz 2D and Quartz Compositor. It includes both a 2D renderer in CoreGraphics and the composition engine that sends...