OpenSSL Large Client Master Key Exploit Buffer Overflow - Ver2 (CVE-2002-0656)

A buffer overflow vulnerability has been reported in multiple products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows SChannel Denial Of Service (MS14-066; CVE-2014-6321)

A denial of service vulnerability exists in Microsoft SChannel. The vulnerability is due to improper processing of specially crafted packets that leads to a denial of service. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted packets to the target...

Joomla Component com_content SQL Injection (CVE-2008-6923)

SQL injection vulnerability has been reported in Joomla Com Content. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft ASP.NET MVC Cross-Site-Scripting (MS14-059; CVE-2014-4075)

A cross-site scripting vulnerability has been reported in ASP.NET MVC. The vulnerability is due the way ASP.NET MVC improperly handles encoded input. A remote attacker can exploit this vulnerability by enticing an affected user to open a malicious web-page...

Microsoft Internet Explorer Elevation of Privilege (MS14-056; CVE-2014-4123)

An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...

PHP unserialize Call SPL ArrayObject and SPLObjectStorage Memory Corruption (CVE-2014-3515)

A memory corruption vulnerability exists in PHP. The vulnerability is due to type confusion in the unserialize function for SPL ArrayObject and SPLObjectStorage. An attacker can exploit this vulnerability if the application uses the vulnerable function...

HP SiteScope EmailServlet Information Disclosure (CVE-2014-2614)

An information disclosure vulnerability has been reported in HP SiteScope. The vulnerability is due to a lack of input validation in the EmailServlet servlet when processing HTTP requests. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...

Advantech WebAccess SCADA webvact.ocx GotoCmd Buffer Overflow (CVE-2014-0765)

A stack buffer overflow has been reported in Advantech's WebAccess SCADA software. This vulnerability is due to insufficient input validation on the GotoCmd parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this...

JIRA Issues Collector Directory Traversal (CVE-2014-2314)

A directory traversal vulnerability has been reported in the Issues Collector plugin in Atlassian JIRA. The vulnerability is due to insufficient validation of the 'filename' parameter provided by the user. A remote attacker could exploit this vulnerability by sending a specially crafted request t...

Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044) - Ver2 (CVE-2008-3020)

BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...

Microsoft Excel Malformed File Memory Corruption - Ver2 (CVE-2012-1886)

A memory corruption vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affecte...

HP Network Node Manager Cross-Site Scripting - Ver2 (CVE-2011-4156)

A cross-site scripting vulnerability has been reported in Hp Network Node Manager I. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0297)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Adobe Acrobat Reader customDictionaryOpen Memory Corruption - Ver2 (CVE-2009-1493)

A memory corruption vulnerability has been reported in Adobe Reader. The vulnerability is due to insufficient input validation in the implementation of the customDictionaryOpen JavaScript method. A remote attacker could exploit this vulnerability by enticing the target user to open a malicious PD...

FreeBSD bsnmpd GETBULK PDU Stack Buffer Overflow (CVE-2014-1452)

A remote code execution vulnerability exists in the FreeBSD. The vulnerability is caused due to improper handling of crafted GETBULK PDU requests. A remote,unauthenticated attacker can exploit these vulnerabilities to execute arbitrary code on the target system within the security context of bsnm...

Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Oracle BPEL Process Manager ScriptServlet Information Disclosure (CVE-2013-3828)

A directory traversal vulnerability has been reported in Oracle BPEL Process Manager. The vulnerability is due to insufficient input validation in ScriptServlet when processing HTTP request parameters. A remote unauthenticated attacker can leverage this vulnerability to obtain sensitive informati...

Microsoft Windows NDProxy.sys Elevation of Privilege (CVE-2013-5065)

An elevation of privilege vulnerability has been reported in Microsoft Windows...

HP System Management Homepage iprange Stack Buffer Overflow (CVE-2013-2362)

A stack buffer overflow exists in HP System Management Homepage...

HP Data Protector CRS Opcode 264 Stack Buffer Overflow (CVE-2013-2327)

A stack buffer overflow has been discovered in HP Data Protector...

IBM Lotus Quickr qp2.cab ActiveX Control Integer Overflow (CVE-2013-3026)

A buffer overflow vulnerability exists in IBM Lotus Quickr for Domino. The vulnerability is due to an integer overflow within the qp2.cab ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a crafted web page using Internet Explorer. Successful...

Microsoft Windows Uniscribe Font Parsing Engine Memory Corruption (MS13-060; CVE-2013-3181)

A remote code execution vulnerability exists in the Unicode Scripts Processor included in affected versions of Microsoft Windows...

Microsoft Internet Explorer Memory Corruption (MS13-059: CVE-2013-3193)

A remote code execution vulnerability has been reported in Internet Explorer...

Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3163)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Internet Explorer Deleted HTML Object Memory Corruption (MS13-047; CVE-2013-3112)

A use after free vulnerability has been reported in Internet Explorer...

Internet Explorer Text Element Use After Free (MS13-047; CVE-2013-3121)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Microsoft Internet Explorer Multiple Dom Objects Memory Corruption (MS13-047; CVE-2013-3124)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Apache Struts URL and Anchor tag includeParams OGNL Command Execution (CVE-2013-1966; CVE-2013-2115)

The url/a tags resolve every parameter passed to them, allowing arbitrary OGNL expressions encoded into the URL to be evaluated bypassing both Struts and OGNL library protections. Successful exploitation will allow an attacker to execute arbitrary commands in the context of the server...

ACDSee FotoSlate PLP File id Parameter Overflow (CVE-2011-2595)

A parameter overflow vulnerability exists in ACDSee FotoSlate. The vulnerability is due to boundary errors in FSEngine4.dll when processing the "id" attribute certain tags. A remote attacker could trigger this flaw by tricking a victim into opening a specially crafted malicious .plp file...

Apple QuickTime ActiveX Control Clear Method Use After Free - Improved Performance (CVE-2012-3754)

A use-after-free vulnerability has been reported in Apple QuickTime's ActiveX control. The vulnerability is due to an error while handling a certain method. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted web page using Internet Explorer...

Microsoft Word CSS Processing Code Execution - Improved Performance (MS08-026; CVE-2008-1434)

A remote code execution vulnerability has been identified in Microsoft Word...

Internet Explorer OnResize Use After Free Remote Code Execution (MS13-021; CVE-2013-0087)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Opera SVG clipPath Use After Free Memory Corruption (CVE-2013-1638)

A use-after-free vulnerability has been reported in Opera web browser. The vulnerability is due to an error while parsing SVG content. A remote attacker can exploit this vulnerability by enticing a user to download and process a maliciously crafted file with a vulnerable version of Opera...

Microsoft Internet Explorer Cloned Object Memory Corruption (MS09-002; CVE-2009-0075)

A vulnerability exists in the way Internet Explorer 7 accesses an object that has been deleted, which can cause memory corruption. In an attack case where code injection is successful, the behaviour of the target is entirely dependent on the intended function of the injected code. The code in suc...

Microsoft SSL and TLS Protocol Security Feature Bypass (MS13-006; CVE-2013-0013)

A security feature bypass vulnerability has been reported in the Microsoft Windows SSL/TLS...

Zend Technologies Zend Framework Zend_XmlRpc Information Disclosure (CVE-2012-3363)

An information disclosure vulnerability has been reported in Zend Technologies Zend Framework...

Microsoft Excel Incorrect BIFF2 Record Parsing Code Execution (MS11-072; CVE-2011-1988)

A remote code execution vulnerability has been reported in Microsoft Excel...

CA Total Defense Suite UNCWS getDBConfigSettings Credential Information Disclosure (CVE-2011-1655)

An information disclosure vulnerability has been reported in CA Total Defense Suite. The vulnerability is due to insufficient access control when handling requests to the getDBConfigSettings web method. A remote attacker may exploit this vulnerability by sending a specially crafted SOAP xml to th...

Preemptive Protection against Novell GroupWise Internet Agent RRULE Time Conversion Invalid Array Indexing (CVE-2011-2663)

A remote code injection and execution vulnerability has been reported in Novell GroupWise Internet Agent GWIA...

libsndfile PAF File Integer Overflow (CVE-2011-2696)

A heap buffer overflow vulnerability has been reported in libsndfile C library. The vulnerability is due to an error in the Paris Audio Format PAF processing code of the libsndfile library. A remote attacker could exploit this vulnerability by enticing a target user to download and open a special...

Microsoft Windows TrueType Font File Parsing Code Execution (CVE-2011-3402)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper bounds checking when parsing specially crafted TrueType Font TTF files. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted TTF...

HP OpenView Storage Data Protector EXEC_CMD Buffer Overflow (CVE-2011-1866)

A remote code execution vulnerability has been reported in HP OpenView Storage Data Protector. The vulnerability is due to insufficient boundary checking while handling EXECCMD messages. A remote attacker may exploit this vulnerability by sending a specially crafted EXECCMD to an affected service...

GOM Player ActiveX Control Buffer Overflow (CVE-2007-5779)

A remote code execution vulnerability has been reported in GOM player. The vulnerability is due to a boundary error in GOM while handling a certain method. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a specially crafted HTML page. Successful...

Preemptive Protection against Microsoft Office Excel Use-after-free Code Execution (MS11-072; CVE-2011-1986)

A remote code execution vulnerability has been reported in Microsoft Office Excel. A remote attacker could exploit this vulnerability to execute arbitrary code in an affected system...

HP Data Protector Backup Client Service EXEC_SETUP Code Execution (CVE-2011-0922)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The backup agent supports various message types in its communication with clients in...

Adobe Shockwave Director tSAC Chunk Invalid Seek Memory Corruption (CVE-2010-2875)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...

Microsoft Office Excel RealTimeData Record Memory Corruption (MS11-021; CVE-2011-0101)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Internet Explorer HTML Object use after free Memory Corruption (MS10-090; CVE-2010-3340)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...

Microsoft PowerPoint DLL Planting Code Execution (MS10-087; CVE-2010-3337)

Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A memory corruption vulnerability has been identified in the way that Microsoft Office handles the loading of DLL files. This vulnerability...

Microsoft Office Art Drawing Records Code Execution (MS10-087; CVE-2010-3334)

Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A remote attacker could exploit this issue via a malformed Office file. Successful exploitation of this vulnerability may allow execution of...