13538 matches found
Microsoft Browser Scripting Engine Memory Corruption (CVE-2018-0762)
A Type Confusion vulnerability exists in Microsoft Browsers. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. Successful exploitation of this vulnerability can achieve Remote Code Execution...
Microsoft Edge Memory Corruption (CVE-2017-11888; CVE-2018-8125)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is in the way that Microsoft browser javascript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the conte...
Apache HTTPD mod_http2 Null Pointer Dereference (CVE-2017-7659)
A null pointer dereference vulnerability exists in the modhttp2 module of Apache HTTPD. This vulnerability is due to improper handling of HTTP requests. A remote, unauthenticated attacker could exploit these vulnerability by sending maliciously crafted HTTP request to the affected server...
Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16386)
A buffer over-read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to lack of bounds checking when XPS2PDF conversion engine handling specially crafted JEPG file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted XPS...
Microsoft Internet Explorer Memory Corruption (CVE-2017-8594)
A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted we...
Microsoft Windows Cursor Elevation of Privilege (CVE-2017-8466)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when Windows fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable file...
Microsoft Windows Search Remote Code Execution (CVE-2017-8543)
A remote code execution vulnerability exists in Windows Search Service. The vulnerability is due to out of bounds memory access. A remote attacker can exploit this issue by sending specially crafted SMB requests. A successful exploitation could lead to arbitrary code execution...
OpenVPN P_CONTROL Denial of Service (CVE-2017-7478)
A denial-of-service vulnerability exists in OpenVPN. This vulnerability is due to an assertion in OpenVPN server that can be reached during the processing of a malicious packet. A remote, unauthenticated attacker can exploit this vulnerability to cause the OpenVPN server program to terminate,...
Microsoft Windows Kernel Information Disclosure (CVE-2017-0167)
An information disclosure vulnerability exists within Microsoft Windows. The vulnerability is caused when Microsoft Windows kernel improperly handles objects in memory. Successful exploitation of this issue might lead to leakage of sensitive information from the kernel...
HT-MP3Player 1.0 HT3 File Parsing Buffer Overflow (CVE-2009-2485)
A buffer overflow vulnerability exists in HT-MP3Player 1.0. The vulnerability exists because the affected software fails to perform sufficient boundary checks on user-supplied input when processing .ht3 files. A successful exploitation could lead to execution of arbitrary code on the targeted...
Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0086)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...
Microsoft Office Information Disclosure (MS17-014: CVE-2017-0105)
An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0090)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way the Windows Uniscribe handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...
GetGo Download Manager HTTP Response Header Buffer Overflow (CVE-2014-2206)
A remote code-execution vulnerability exists in GetGo Download Manager. The vulnerability is due to incorrectly handling the object header in a crafted file. A remote attacker can exploit this vulnerability by enticing the target user to download a file from a malicious server, potentially causin...
Microsoft Windows Graphics Remote Code Execution (MS16-146: CVE-2016-7272)
A remote code execution vulnerability exists in Microsoft Windows Graphics. The vulnerability is due to the improper handling of objects in the memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
Microsoft Edge Memory Corruption (MS16-145: CVE-2016-7286)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to a memory corruption when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption...
Microsoft Office Memory Corruption (MS16-133: CVE-2016-7230)
A remote code execution vulnerability exists in Microsoft PowerPoint. The vulnerability is due to a use-after-free error in Microsoft PowerPoint while handling a specially crafted PPT file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PPT...
Microsoft Office Memory Corruption (MS16-121: CVE-2016-7193)
A buffer overflow vulnerability exists in the Word's RTF parser. The vulnerability is due to invalid parsing of RTF files. By enticing the user to open a specially crafted RTF file, an attacker could exploit this vulnerability to execute arbitrary code on the affected system...
Solarwinds Virtualization Manager Apache Commons Collections Insecure Deserialization (CVE-2016-3642)
An insecure deserialization vulnerability has been reported in Solarwinds Virtualization Manager. This vulnerability is due to the inclusion of the vulnerable version of Apache Commons Collections library in the classpath combined with insecure deserialization. A remote, unauthenticated attacker...
Microsoft Internet Explorer Memory Corruption (MS16-084 : CVE-2016-3259)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption in...
Microsoft Internet Explorer Memory Corruption (MS16-063: CVE-2016-3207)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
Adobe Acrobat Reader Security Bypass (APSB16-14: CVE-2016-1062)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Microsoft Internet Explorer Scripting Engine Memory Corruption (MS16-051: CVE-2016-0187)
A use-after-free vulnerability was detected in Microsoft Internet Explorer in the handling of BooleanProtoObj objects. The underlying vulnerability lies in jscript!JSONStringifyArray where a previously released object is reused...
Microsoft Windows OLE Memory Remote Code Execution (MS16-030: CVE-2016-0092)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is caused due to a missing bound checks. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0063)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft Windows Winsock Elevation of Privilege (MS15-119: CVE-2015-2478)
An elevation of privilege vulnerability exists in Windows Winsock. The vulnerability is due to an error in the way windows kernel verifies memory address. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted code...
Microsoft Internet Explorer Information Disclosure (MS15-112: CVE-2015-6086)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling unsafe command line parameters. A remote attacker can exploit this issue by enticing a user to open a specially crafted...
IBM Tivoli Storage Manager FastBack Server Opcode 1331 lza32 Command Injection (CVE-2015-1938)
A command injection vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient input validation of parameters in opcode 1331 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...
Microsoft Office Memory Corruption (MS15-110: CVE-2015-2555)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Steema TeeChart ActiveX Control Buffer Overflow (CVE-2011-4034)
A stack buffer overflow exists in Steema TeeChart. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML, which may allow the attacker to execute arbitrary code on the affected system...
Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2458)
Remote code execution vulnerabilities exist in Microsoft Windows. The vulnerability is due to an error in the way Microsoft Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. A remote attacker can exploit this issue by enticing a victim to open a specially...
Microsoft Windows OpenType Font Parsing Remote Code Execution (MS15-080: CVE-2015-2460)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the OpenType Font OTF driver handles objects in memory. A remote attacker can exploit this issue by enticing a target user to open a specially crafted web page or email...
Microsoft Windows ATMFD Font Driver Kernel Pool Overflow (MS15-078: CVE-2015-2426)
A flaw has been discovered in Microsoft Windows OTF files. Successful exploitation could lead to a kernel pool overflow when a system attempt to copy data results in memory corruption...
Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2372)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Novell CASA PAM Module Stack Buffer Overflow - Ver2 (CVE-2006-0736)
A buffer overflow vulnerability has been reported in Novell's CASA. The vulnerability is due to a boundary error in the CASA PAM handler 'pammicasa' authentication module. A remote attacker can exploit this vulnerability by gaining root access to any machine with CASA installed...
MySQL yaSSL Certificate Packet Stack Overflow - Ver2 (CVE-2009-4484)
A buffer overflow vulnerability has been reported in MySQL. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft DirectShow Size Validation Remote Code Execution (MS09-028) - Ver2 (CVE-2009-1539)
Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The vulnerability is due to an error in the Microsoft DirectShow component that fails to properly validate certain size fields within...
Microsoft Browser Embedded Media Player Memory Corruption (MS10-082) - Ver2 (CVE-2010-2745)
Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in the Windows Media Player that improperly...
Microsoft Word Local Zone Remote Code Execution (MS15-022; CVE-2015-0097)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused when the Office software improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted office...
Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-0056)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft PowerPoint Converter TPrint Record Handling Error (MS09-017) - Ver2 (CVE-2009-0227)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overrun vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafte...
ActiveBar ActiveX Method Arbitrary File Write - Ver2 (CVE-2007-3883)
An Overwrite Files vulnerability has been reported in The Data Dynamics ActiveBar ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to create or overwrite files via a full pathname in the second argument to the Save method, or the first argument to the...
RealNetworks HELIX Server Denial of Service - Ver2 (CVE-2004-0389)
A denial-of-service vulnerability has been reported in Realnetworks Helix Universal Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Windows SChannel Denial Of Service (MS14-066; CVE-2014-6321)
A denial of service vulnerability exists in Microsoft SChannel. The vulnerability is due to improper processing of specially crafted packets that leads to a denial of service. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted packets to the target...
Joomla Component com_rsfiles Directory traversal (CVE-2007-4504)
A directory traversal vulnerability has been reported in Joomla ComRsfiles. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Microsoft ASP.NET MVC Cross-Site-Scripting (MS14-059; CVE-2014-4075)
A cross-site scripting vulnerability has been reported in ASP.NET MVC. The vulnerability is due the way ASP.NET MVC improperly handles encoded input. A remote attacker can exploit this vulnerability by enticing an affected user to open a malicious web-page...
Microsoft Internet Explorer Memory Corruption (MS14-056; CVE-2014-4141)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Advantech WebAccess SCADA webvact.ocx NodeName2 Buffer Overflow (CVE-2014-0766)
A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the NodeName2 parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote unauthenticated attacker could exploit this vulnerability by enticing a...
Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044) - Ver2 (CVE-2008-3020)
BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...
Microsoft Excel Malformed File Memory Corruption - Ver2 (CVE-2012-1886)
A memory corruption vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affecte...