McAfee ePolicy Orchestrator XML Entity Injection (CVE-2015-0921)

An XML External Entity vulnerability has been reported in McAfee ePolicy Orchestrator ePO. The vulnerability is due to an input validation error in the ePO-web application. A remote attacker can exploit this vulnerability by sending a maliciously crafted XML dashboard definition...

Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0023)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

RealNetworks HELIX Server Denial of Service - Ver2 (CVE-2004-0389)

A denial-of-service vulnerability has been reported in Realnetworks Helix Universal Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056) - Ver2 (CVE-2009-2511)

The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and encoding to and decoding from Abstract Syntax Notation One ASN.1 to their Windows-based applications. A spoofing vulnerability has been reported i...

AlienVault OSSIM Framework Backup Command Execution (CVE-2014-5158)

A command execution vulnerability exists in AlienVault OSSIM Framework. The vulnerability is due to insufficient sanitization of user supplied data that is used to execute backup commands. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...

Adobe Acrobat and Reader Sandbox Bypass (APSB14-20; CVE-2014-0568)

A sandbox Security Bypass vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in the sandbox protection mechanism. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

PHP unserialize Call SPL ArrayObject and SPLObjectStorage Memory Corruption (CVE-2014-3515)

A memory corruption vulnerability exists in PHP. The vulnerability is due to type confusion in the unserialize function for SPL ArrayObject and SPLObjectStorage. An attacker can exploit this vulnerability if the application uses the vulnerable function...

CoolPDF Reader Image Stream Processing Buffer Overflow - ver 2 (CVE-2012-4914)

A code execution vulnerability has been reported in CoolPDF Reader. The vulnerability is due to insufficient validation of streams while processing PDF files. A remote attacker can exploit this vulnerability by enticing an unsuspecting user to download and process a specially crafted PDF file,...

Katello update_roles Privilege Escalation (CVE-2013-2143)

A privilege escalation vulnerability has been reported in Katello. The vulnerability is due to a missing authorization at the "updateroles" action of "users" controller. A remote authenticated attacker may exploit this vulnerability to gain administrator privileges...

Microsoft Word UPX Data Stack Validation Buffer Overflow - Ver2 (CVE-2010-3214)

A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in Microsoft Word that fails to properly validate UPX structures within specially crafted Word files. Successful exploitation of this vulnerability could allow a remote attacker to...

Microsoft Internet Explorer Memory Corruption (MS14-018: CVE-2014-1755)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Apple Iphone OS Springboard Application Malformed Character Denial of Service - Ver2 (CVE-2010-1226)

A denial-of-service vulnerability has been reported in Apple Iphone OS. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Word Memory Corruption (MS14-001; CVE-2014-0258)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially craft...

Symantec Web Gateway blocked.php Blind SQL Injection - Ver2 (CVE-2012-2574)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Word RTF Object Parsing Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4027)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory calculation error in Microsoft Word that fails to properly handle specially crafted control words in Rich Text Format .rtf files....

CS Chat-r-box csChatRBox.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1752)

A code execution vulnerability has been reported in Cgiscript.net Cschat-r-box. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

OP5 welcome Remote Command Execution (CVE-2012-0262)

An arbitrary commands execution vulnerability has been reported in OP5 appliances...

Microsoft Internet Explorer Memory Corruption (MS13-080; CVE-2013-3897)

A remote code execution vulnerability has been reported in Internet Explorer...

Corel WordPerfect Document Processing Buffer Overflow (CVE-2012-4900)

A heap memory corruption vulnerability has been reported in Corel WordPerfect...

HP Intelligent Management Center mibFileUpload Servlet Arbitrary File Upload (CVE-2012-5201)

An arbitrary file upload vulnerability exists in HP Intelligent Management Center...

IBM SPSS SamplePower c1sizer ActiveX Control Buffer Overflow (CVE-2012-5946)

A heap-based buffer overflow vulnerability exists in IBM SPSS SamplePower...

3S Smart Software Solutions CoDeSys Gateway Server Stack Buffer Overflow (CVE-2012-4708)

A stack buffer overflow vulnerability has been reported in 3S Smart Software CoDeSys...

IBM Java Multiple Packages Sandbox Breach (CVE-2012-4822)

A sandbox breach vulnerability has been reported in IBM Java. The vulnerability is due to insecure use of certain methods in java.lang.class by IBM Java packages. An unauthenticated remote attacker can exploit this vulnerability by enticing the target user to open a crafted web page. Successful...

Microsoft Office OneNote Parsing Memory Information Disclosure (MS13-025; CVE-2013-0086)

An information disclosure vulnerability exists in the way that Microsoft OneNote allocates memory from parsing a specially crafted OneNote .ONE file...

EMC AlphaStor Device Manager Command Injection - Improved performance (CVE-2013-0928)

A remote command execution vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious request containing a specially crafted parameter to the target server. Successful...

Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)

A buffer overflow vulnerability has been reported in Apple QuickTime...

Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)

A cross-site-scripting vulnerability has been reported in Trend Micro InterScan Messaging Security Suite...

EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395)

A buffer overflow vulnerability has been reported in EMC NetWorker...

HP Easy Printer Care ActiveX Control Directory Traversal (CVE-2011-4786)

A directory traversal vulnerability has been reported in HP Easy Printer Care. The vulnerability is due to a lack of sanitization in the HPESPRIT.XMLCacheMgr.1 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page...

Microsoft Visual Studio Add-In Insecure Library Loading (MS12-021; CVE-2012-0008)

An elevation of privilege vulnerability has been reported in Microsoft Visual Studio...

RKD Software ActiveX Control Remote Stack Buffer Overflow (CVE-2007-3435)

A Stack buffer overflow vulnerability has been reported in RKD Software Barcode Application. The vulnerability is due to a boundary error within the ABarCode ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially...

Microsoft Windows TrueType Font File Parsing Code Execution (CVE-2011-3402)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper bounds checking when parsing specially crafted TrueType Font TTF files. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted TTF...

Microsoft Internet Explorer Element Index Memory Corruption (MS11-081; CVE-2011-1999)

A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due an error in Internet Explorer when validating the integrity of certain DOM elements. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful...

Xerver HTTP CRLF Injection Response Splitting (CVE-2009-4086)

This is a CRLF injection vulnerability in Xerver HTTP Server. Remote attackers could use this vulnerability to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL...

Microsoft Office File Malformed String Parsing Buffer Overflow(MS06-038; CVE-2006-1540)

Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applications and components. A memory corruption vulnerability has been reported in several Microso...

Microsoft Windows Media Player PNG Chunk Handling Stack Overflow (MS06-024) - High Confidence (CVE-2006-0025)

An attacker can exploit this vulnerability by enticing a user to open a crafted PNG file, resulting in the possible injection and execution of arbitrary code on the target system with the privileges of the currently logged-in user. A remote stack buffer overflow vulnerability has been discovered ...

Microsoft Windows Kernel LoadKeyboardLayoutEx Code Execution (MS11-034; CVE-2011-1241)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been reported in the Windows kernel. The...

Adobe Photoshop CS5 Insecure Library Loading Code Execution (APSB10-30; CVE-2010-3127)

Adobe Photoshop CS5 is a graphics editing program that features a 3D engine. A library-loading vulnerability has been identified in Adobe Photoshop CS5. This vulnerability is due to the application insecurely loading certain librairies from the current working directory, which could allow attacke...

Microsoft WMI Administrative Tools WBEMSingleView.ocx Code Execution (CVE-2010-3973)

Windows Management Instrumentation WMI is a set of extensions to the Windows Driver Model that provides an operating system interface through which instrumented components provide information and notification. The WMI Administrative Tools are made of four tools: WMI CIM Studio, WMI Object Browser...

VERITAS NetBackup Java Authentication Service Format String (CVE-2005-2715)

The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...

Microsoft Excel Formula BIFF Record Parsing Memory Corruption (MS10-080; CVE-2010-3231)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly validate record information upon opening a specially crafted Excel file. A remote...

IBM Tivoli Storage Manager FastBack Mount Service Code Execution (CVE-2010-3058)

The IBM Tivoli Storage Manager TSM is a product used for storing backups and archiving data. A remote code execution vulnerability has been reported in IBM Tivoli Storage Manager FastBack. The vulnerability is due to an arbitrary memory accessing in Fastback Mount Service FastBackMount.exe which...

Sun Directory Server LDAP Denial of Service (CVE-2006-0647)

Sun Directory Server is a distributed directory server based on the Lightweight Directory Access Protocol LDAP. The server listens for LDAP requests on a port specified during installation. The default port assigned to the server during installation is randomly selected. There exists a...

Microsoft Windows LSASS Malformed LDAP Messages Heap Overflow (MS10-060; CVE-2010-0820)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service. An authenticated elevation of privilege vulnerability has be...

Embedded Base-64 Encoded TTF Files (CVE-2010-2738)

Unicode Script Processor is a Windows component that enables a text layout client to format complex scripts. A remote code execution vulnerability has been reported in the way affected versions of Microsoft Windows incorrectly parse specific font types. A remote attacker could exploit this issue...

CA BrightStor ARCserve Backup Message Engine Stack Overflow (CVE-2007-5327)

There exists a buffer overflow vulnerability in CA BrightStor ARCserve Backup Message Engine. The vulnerability is due to insufficient boundary checking when processing strings supplied in RPC requests. Successful exploitation of this vulnerability allows a remote unauthenticated attacker to...

IBM Lotus Notes Lotus 1-2-3 Work Sheet File Viewer Buffer Overflow (CVE-2007-6593)

There is a buffer overflow vulnerability exists in IBM Lotus Notes. The vulnerability is due to a boundary error within the Lotus 1-2-3 file viewer. A remote attacker could leverage this vulnerability by enticing a target user to view the maliciously crafted email attachment. Successful attack...

ToolTalk rpc.ttdbserverd Database Parser Heap Overflow (CVE-2010-0083)

ToolTalk is a communications system developed by Sun Microsystems in order to allow applications to communicate with each other at runtime. A heap overflow vulnerability has been discovered in the ToolTalk database server. The vulnerability is located within a function of the ToolTalk database...

Internet Explorer HTML Objects Memory Corruption (MS08-031; CVE-2008-1442)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. There exists a heap buffer overflow...