13538 matches found
SAP NetWeaver DiagiEventSource Denial of Service (CVE-2012-2514)
A denial of service vulnerability has been reported in SAP NetWeaver's Dispatcher service...
Oracle Database TNS Listener Service Registration Authentication Weakness (CVE-2012-1675)
An authentication weakness vulnerability has been reported in Oracle Database's TNS listener component...
Cisco WebEx Player Malformed .WRF File Code Execution (CVE-2010-3269)
A stack buffer overflow has been reported in Cisco WebEx Player...
Microsoft Exchange Server IMAP Command Denial of Service (MS07-026; CVE-2007-0221)
An integer overflow vulnerability has been reported in Microsoft Exchange Server...
Apple Safari file URL Arbitrary Code Execution (CVE-2011-3230)
A remote code execution vulnerability has been reported in Apple Safari. The vulnerability is due to an error in Apple Safari while handling of file:// URLs. A remote attacker can exploit this vulnerability to execute arbitrary code...
Microsoft Internet Explorer Element Index Memory Corruption (MS11-081; CVE-2011-1999)
A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due an error in Internet Explorer when validating the integrity of certain DOM elements. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful...
Microsoft PowerPoint .dll Insecure Library Loading (MS11-073; CVE-2011-1980)
The vulnerability is due to insecure library loading issue in Microsoft PowerPoint. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted PowerPoint file. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system...
Amaya Browser BDO Tag Buffer Overflow (CVE-2009-0323)
A buffer overflow vulnerability has been reported in Amaya web browser. Amaya is an open source web authoring and browsing tool which is mainly used as a test bed for web standards. The vulnerability is due to an error in the way the browser parses HTML files with specially crafted BDO tags. A...
Adobe Shockwave Director tSAC Chunk Invalid Seek Memory Corruption (CVE-2010-2875)
Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...
Microsoft Internet Explorer JPEG Rendering Buffer Overflow (MS05-038; CVE-2005-1988; CVE-2005-2308)
The Microsoft Internet Explorer supports the rendering of Joint Photographic Experts Group JPEG images in HTML pages. A buffer overflow vulnerability has been reported in the Microsoft Internet Explorer JPEG image rendering component. The vulnerability is due to the improper validation of user...
HP OpenView Network Node Manager ovutil.dll stringToSeconds Buffer Overflow (CVE-2011-0262)
The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...
Microsoft Office Publisher Array Indexing Memory Corruption (MS10-103; CVE-2010-3955)
Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more A remote attacker can exploit this issue via a specially crafted Publisher file. Successful exploitation may allow execution of arbitrary code on the vulnerable system. The...
Symantec IM Manager rdpageimlogic.aspx Multiple SQL Injections (CVE-2010-0112)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...
Microsoft PowerPoint DLL Planting Code Execution (MS10-087; CVE-2010-3337)
Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A memory corruption vulnerability has been identified in the way that Microsoft Office handles the loading of DLL files. This vulnerability...
Internet Explorer toStaticHTML API Cross-Site-Scripting (MS10-072; CVE-2010-3324)
Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. An information disclosure vulnerability has been reported in the way that the toStaticHTML API sanitizes HTML. The vulnerability is due to the way that Internet Explorer handles content using specific...
IBM Tivoli Storage Manager FastBack Mount Service Code Execution (CVE-2010-3058)
The IBM Tivoli Storage Manager TSM is a product used for storing backups and archiving data. A remote code execution vulnerability has been reported in IBM Tivoli Storage Manager FastBack. The vulnerability is due to an arbitrary memory accessing in Fastback Mount Service FastBackMount.exe which...
Update Protection against Synology Disk Station FTP Login Web Commands Injection Vulnerability
A remote command injection vulnerability has been discovered in Synology Disk Station. The Synology Disk Station is a product designed for storage purposes of small offices or home users. It supports several terabytes of total storage. A remote attacker may exploit this vulnerability to execute...
Sun Directory Server LDAP Denial of Service (CVE-2006-0647)
Sun Directory Server is a distributed directory server based on the Lightweight Directory Access Protocol LDAP. The server listens for LDAP requests on a port specified during installation. The default port assigned to the server during installation is randomly selected. There exists a...
Embedded Base-64 Encoded TTF Files (CVE-2010-2738)
Unicode Script Processor is a Windows component that enables a text layout client to format complex scripts. A remote code execution vulnerability has been reported in the way affected versions of Microsoft Windows incorrectly parse specific font types. A remote attacker could exploit this issue...
RealNetworks RealPlayer FLV Parsing Multiple Integer Overflows (CVE-2010-3000)
RealPlayer is a media player application developed by RealNetworks Inc. This application is capable of playing back numerous multimedia file formats and can open media files from local file system or network servers. RealPlayer has an extensible nature that allows it to handle different media fil...
Preemptive Protection against Apple Mac OS X CoreGraphics Heap Overflow Vulnerability
A heap buffer overflow Vulnerability has been discovered in Apple CoreGraphics. CoreGraphics refers to a pair of Mac OS X technologies, each part of the CoreGraphics framework: Quartz 2D and Quartz Compositor. It includes both a 2D renderer in CoreGraphics and the composition engine that sends...
HP OpenView NNM ovwebsnmpsrv.exe Invalid Option Buffer Overflow (CVE-2010-1960)
The HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerabili...
CA BrightStor ARCserve Backup Tape Engine RPC ReserveGroup Buffer Overflow (CVE-2006-6917)
Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...
ToolTalk rpc.ttdbserverd Database Parser Heap Overflow (CVE-2010-0083)
ToolTalk is a communications system developed by Sun Microsystems in order to allow applications to communicate with each other at runtime. A heap overflow vulnerability has been discovered in the ToolTalk database server. The vulnerability is located within a function of the ToolTalk database...
Oracle Database SQL Compiler Access Control Security Bypass (CVE-2007-3855)
There exists a security bypass vulnerability in the Oracle Database Server product. Specifically, the flaw exists due to improper enforcement of user permissions on data access to tables through certain types of views. A remote authenticated attacker may use this vulnerability to perform UPDATE,...
Mercury Mail Transport System Buffer Overflow (CVE-2005-4411)
The Mercury Mail Transport System server is an implementation of an Internet mail server. The product offers services which are implementations of the server side of several protocols such as SMTP, POP3, IMAP and Computing and Communications Services Office Nameserver protocol also know as the...
Microsoft Windows Embedded OpenType Font Engine LZCOMP Overflow (MS10-001; CVE-2010-0018)
Embedded OpenType EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploit these vulnerabilities via a specially crafted EOT file. Successful exploitation may allow execution of arbitrary code on a vulnerable system. An integer overflow vulnerability has...
Microsoft Windows Media Player ActiveX Codec Retrieval (CVE-2010-0268)
Microsoft Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in the Windows Media Player's ActiveX control. The vulnerability is due to an error in the Windows...
Internet Explorer Post Encoding Information Disclosure (MS10-018; CVE-2010-0488)
Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in the way that Internet Explorer handles content using specific encoding strings when submitting data. The vulnerability is due to the way Internet Explorer handles...
CA Multiple Products HTTP Request Buffer Overflow (CVE-2005-3190)
The Computer Associates CA BrightStor backup server product line provides facilities for integration with third party software and hardware products to consolidate storage management tasks. CA uses an XML-based interface named iSponsor/iGateway to integrate with storage management applications fr...
IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow (CVE-2005-2618)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP and IMAP protocols. There exists a buffer overflow vulnerability in IBM Lotus Notes Attachment Viewer...
Microsoft Office Publisher Invalid Memory Reference (MS08-012; CVE-2008-0102)
Microsoft Publisher is an application that allows users to design, layout, and format documents destined to be published in print, on the web, and various other formats. The main use of the application is in publishing brochures, advertisements, and other documents that require a greater degree o...
Internet Explorer Script Action Handler Buffer Overflow (CVE-2006-1245)
Microsoft Internet Explorer is the most widely used web browser application used today. The browser is capable of processing HTML, scripting languages, and various other popular Internet specifications. A vulnerability has been identified in Microsoft Internet Explorer. The vulnerability is creat...
Firefox Image File Dragging Malformed Extension (CVE-2005-0230)
The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages and downloading files. The Mozilla web browser allows the user to quickly save images displayed on web pages by...
Citrix Program Neighborhood Agent Buffer Overflow (CVE-2004-1078)
Citrix Presentation Server, formally known as Citrix MetaFrame, is designed for central application deployment. This package allows applications to be deployed and managed by a farm of dedicated servers and allow client machines to access the applications remotely. There exists a buffer overflow...
Oracle Database Server XDB PITRIG_TRUNCATE Procedure Buffer Overflow (CVE-2008-0339)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
Internet Explorer Object Reference Counting Memory Corruption (MS07-069; CVE-2007-3902)
Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. A memory corruption vulnerability exist...
Symantec AntiVirus Real Time Virus Scan Service Stack Overflow (CVE-2006-2630)
Symantec Antivirus Corporate Edition and Symantec Client Security are applications designed to protect organizations from the threat of viruses, malware, and intrusion attempts. Both applications can be deployed in an enterprise network environment, and they both support an anti-virus scanning...
Multiple Products Arbitrary File Location Upload (CVE-2004-0959; CVE-2015-0781)
A directory traversal vulnerability exists in several products including Novell ZENworks Configuration Management and web servers working with PHP 5.0.2 and below. The vulnerability is due to incorrect handling of the Content-Disposition MIME header. Remote unauthenticated attackers can leverage...
Microsoft .NET Framework Pointer Verification Error (MS09-061; CVE-2009-0090)
The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...
Internet Explorer Data Stream Handling Memory Corruption (MS08-024; CVE-2008-1085)
Microsoft Internet Explorer IE is a web browser application that supports a wide range of WWW standard protocols and content formats. Besides HTML page and graphic images, various non-HTML content can be downloaded using IE. These contents, however, cannot be processed natively by IE. A set of...
Internet Explorer Clone Object Reference Memory Corruption (MS07-069; CVE-2007-3903)
Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. A memory corruption vulnerability exist...
HP OpenView Network Node Manager ovlaunch HTTP Request Buffer Overflow (CVE-2008-4562)
HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A vulnerability exists in HP...
Adobe Flex SDK Cross-Site Scripting (APSB09-13; CVE-2009-1879)
An instance of a DOM-based Cross Site Scripting XSS vulnerability has been discovered in Adobe Flex SDK. Adobe Flex is a software development kit released by Adobe Systems for the development and deployment of cross-platform rich Internet applications based on the Adobe Flash platform. A remote...
Microsoft Remote Desktop Connection DWORD Heap Overflow (MS09-044; CVE-2009-1133)
A remote code execution vulnerability has been reported in the way Microsoft Remote Desktop Connection processes specific parameters returned by the RDP server. The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft...
CA ARCserve Backup Message Engine Denial of Service (CVE-2009-1761)
Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A denial of service vulnerability exists in CA ARCserve Backup Message Engine. The vulnerability exists in CA ARCserve Message Engine. The vulnerability is due to insufficient...
Microsoft DirectShow Size Validation Remote Code Execution (MS09-028; CVE-2009-1539)
Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The vulnerability is due to an error in the Microsoft DirectShow component that fails to properly validate certain size fields within...
Internet Explorer SetCapture Calls Improper Handling (MS09-019; CVE-2009-1529)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...
Microsoft Word Multiple SPRM Records Buffer Overflow (MS09-027; CVE-2009-0563)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. A remote attacker could trigger this flaw by convincing a victim to...
Microsoft Windows Print Spooler LoadLibrary Information Disclosure (MS09-022; CVE-2009-0230)
The Print Spooler service manages the printing process, which includes such tasks as retrieving the location of the correct printer driver, loading that driver, spooling high-level function calls into a print job, and scheduling print jobs. An elevation of privilege vulnerability has been reporte...