Lenovo Veriface III Plain Image Authentication Bypass - Ver2 (CVE-2009-0655)

An authentication bypass vulnerability has been reported in Lenovo Veriface III. Successful exploitation of this vulnerability could allow a remote attacker to bypass login authentication and gain unauthorized access to the vulnerable system...

Microsoft Windows Compressed Folder Exploit Download Code Execution - Ver2 (CVE-2004-0575)

A code execution vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Lighttpd Host Header mod_mysql_vhost SQL Injection (CVE-2014-2323)

A SQL injection vulnerability has been reported in Lighttpd Web Server. The vulnerability is due to insufficient sanitization of user supplied input in the Host header field of a request. A remote attacker could exploit this vulnerability by placing specially crafted data in the Host header field...

Microsoft Windows Mail HTML Link Program Execution - Ver2 (CVE-2007-1658)

A command and program execution vulnerability has been reported in Microsoft Windows Vista. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands and programs on the affected system...

GDI WMF File Rendering Code Execution - Ver2 (CVE-2005-2124)

A code execution vulnerability has been reported in Microsoft GDI. An attacker could exploit this vulnerability via a crafted Windows Metafile WMF format image. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apple QuickTime STSD JPEG Atom Heap Corruption - Ver2 (CVE-2009-0007)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a heap buffer memory corruption vulnerability in Apple QuickTime. The vulnerability is due to lack...

Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315)

A script injection and execution vulnerability has been reported in Movable Type. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary Perl code and SQL commands on the affected system...

Microsoft Windows Shell MSHTA Script Execution in OLE Files (MS05-016) - Ver2 (CVE-2005-0063)

The Windows operating system provides facilities that make it possible to invoke different applications to handle different types of files. This makes it possible for a user to double click on a known image type file, for instance, and by that action launch the proper application to display or ed...

Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08) - Ver2 (CVE-2012-0774)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Microsoft Windows DirectShow JPEG Double Free (MS14-013; CVE-2014-0301)

A double free vulnerability has been reported in Microsoft Windows DirectShow. The vulnerability is due to the way DirectShow handles JPEG images. A remote attacker can exploit this vulnerability by enticing a user to download and process a maliciously crafted JPEG file...

Microsoft Office Word Legacy File Remote Code Execution (MS09-068) - Ver2 (CVE-2009-3135)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word.The vulnerability is due to an error in Microsoft Word that fails to properly parse specially crafted Word files. A remote attacker could trigger this flaw by convinci...

Postguestbook CONF_CONFIG_PATH Parameter PHP Code Execution - Ver2 (CVE-2007-1372)

A code execution vulnerability has been reported in Postguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer mdsauth.dll Arbitrary File Overwrite - Ver2 (CVE-2007-2221)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

Microsoft Internet Explorer mergeAttribues Property Handling Memory Corruption - Ver2 (CVE-2007-0945)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

Microsoft Access ACCDB File Memory Corruption (MS13-074; CVE-2013-3157)

A memory corruption vulnerability has been reported in Microsoft Access...

Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5052)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Oracle BPEL Process Manager ScriptServlet Information Disclosure (CVE-2013-3828)

A directory traversal vulnerability has been reported in Oracle BPEL Process Manager. The vulnerability is due to insufficient input validation in ScriptServlet when processing HTTP request parameters. A remote unauthenticated attacker can leverage this vulnerability to obtain sensitive informati...

Microsoft Windows NDProxy.sys Elevation of Privilege (CVE-2013-5065)

An elevation of privilege vulnerability has been reported in Microsoft Windows...

Microsoft Outlook MIME Email Message Parsing Remote Code Execution (MS13-068; CVE-2013-3870; CVE-2013-3905)

A remote code execution vulnerability exists in Microsoft Office Outlook email client...

HP Data Protector CRS Opcode 264 Stack Buffer Overflow (CVE-2013-2327)

A stack buffer overflow has been discovered in HP Data Protector...

Microsoft SharePoint Server Parameter Injection (MS13-084; CVE-2013-3895)

An elevation of privilege vulnerability exists in Microsoft SharePoint Server...

IBM Lotus Quickr qp2.cab ActiveX Control Integer Overflow (CVE-2013-3026)

A buffer overflow vulnerability exists in IBM Lotus Quickr for Domino. The vulnerability is due to an integer overflow within the qp2.cab ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a crafted web page using Internet Explorer. Successful...

Internet Explorer Text Element Use After Free (MS13-047; CVE-2013-3121)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Internet Explorer Deleted HTML Object Memory Corruption (MS13-047; CVE-2013-3112)

A use after free vulnerability has been reported in Internet Explorer...

Apache Struts URL and Anchor tag includeParams OGNL Command Execution (CVE-2013-1966; CVE-2013-2115)

The url/a tags resolve every parameter passed to them, allowing arbitrary OGNL expressions encoded into the URL to be evaluated bypassing both Struts and OGNL library protections. Successful exploitation will allow an attacker to execute arbitrary commands in the context of the server...

HP LeftHand Virtual SAN Appliance hydra Credential Information Disclosure (CVE-2012-3282)

An information disclosure vulnerability exists in HP LeftHand Virtual SAN Appliance. Successful exploitation will disclose credentials that could allow the attacker to log in to the server with administrator privileges. The vulnerability is due to a design weakness and occurs when a snapshot...

VideoLAN VLC Media Player PNG Code Execution - Improved Performance (CVE-2012-5470)

A code execution vulnerability has been reported in VLC Media Player. The vulnerability is due to an input validation error when handling certain PNG files. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted PNG file with a vulnerable version of VLC...

Opera SVG clipPath Use After Free Memory Corruption (CVE-2013-1638)

A use-after-free vulnerability has been reported in Opera web browser. The vulnerability is due to an error while parsing SVG content. A remote attacker can exploit this vulnerability by enticing a user to download and process a maliciously crafted file with a vulnerable version of Opera...

Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the affected service. Successful exploitation could result in arbitra...

SAP NetWeaver DiagiEventSource Denial of Service (CVE-2012-2514)

A denial of service vulnerability has been reported in SAP NetWeaver's Dispatcher service...

Oracle Database TNS Listener Service Registration Authentication Weakness (CVE-2012-1675)

An authentication weakness vulnerability has been reported in Oracle Database's TNS listener component...

HP Easy Printer Care ActiveX Control Directory Traversal (CVE-2011-4786)

A directory traversal vulnerability has been reported in HP Easy Printer Care. The vulnerability is due to a lack of sanitization in the HPESPRIT.XMLCacheMgr.1 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page...

Microsoft Exchange Server IMAP Command Denial of Service (MS07-026; CVE-2007-0221)

An integer overflow vulnerability has been reported in Microsoft Exchange Server...

HP Intelligent Management Center tftpserver.exe Remote Code Execution (CVE-2011-1851)

A remote code execution vulnerability has been reported in HP Intelligent Management Center. The vulnerability is due to improper verification of the destination buffer's size while handling the transfer mode field within the tftpserver.exe component. A remote attacker could exploit this...

HP OpenView Storage Data Protector EXEC_CMD Buffer Overflow (CVE-2011-1866)

A remote code execution vulnerability has been reported in HP OpenView Storage Data Protector. The vulnerability is due to insufficient boundary checking while handling EXECCMD messages. A remote attacker may exploit this vulnerability by sending a specially crafted EXECCMD to an affected service...

Preemptive Protection against Microsoft SharePoint Server Multiple Cross Site Scripting Vulnerabilities (MS11-074)

Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...

Preemptive Protection Against EMC NetWorker librpc.dll Security Check Bypass (CVE-2011-0321)

A security bypass vulnerability exists in EMC Legato Networker...

Preemptive Protection against Internet Explorer XSLT Object Memory Corruption (MS11-057; CVE-2011-1963)

A memory corruption vulnerability has been reported in an XSLT object within Microsoft Internet Explorer. A remote attacker can leverage this vulnerability to execute arbitrary code on an affected system, within the security context of the logged in user...

Microsoft Office Visio UML Parsing Use After Free (MS11-060; CVE-2011-1972)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due to the improper way in which the application validates objects in memory when parsing specially crafted Visio files. An...

Internet Explorer HTML Object use after free Memory Corruption (MS10-090; CVE-2010-3340)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...

Apple QuickTime Streaming Debug Error Logging Buffer Overflow (CVE-2010-1799)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. One of the media formats supported by Apple QuickTime is SMIL. A stack buffer overflow vulnerability exists in Apple QuickTime medi...

Adobe Shockwave Player DIRAPI.dll Denial of Service (APSB10-20; CVE-2010-2865)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A denial of service vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player MMAP Size Memory Corruption (APSB10-20; CVE-2010-2870)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

IBM Lotus Notes WPD Attachment Viewer Buffer Overflow (CVE-2007-5544)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. There exist a buffer overflow vulnerability in IBM Lotus Notes WPD viewer. The...

Internet Explorer Access ActiveX Controls Remote Code Execution (MS10-044; CVE-2010-0814)

A remote code execution vulnerability exists in Access ActiveX controls due to the way that multiple ActiveX controls are loaded by Internet Explorer. The vulnerability is due to the way that Internet Explorer handles memory allocation when instantiating a succession of Access ActiveX controls. T...

Microsoft Word Array Data Handling Buffer Overflow (MS07-024; CVE-2007-0035)

A buffer overflow vulnerability exists in the way Microsoft Word processes word documents. The vulnerability is the result of an infinite loop. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted Word document, potentially causing arbitrary code to be...

Microsoft IIS4 Exair Sample Site Denial Of Service (CVE-1999-0449)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft Windows 2000, XP and Server 2003. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of...

Internet Explorer Post Encoding Information Disclosure (MS10-018; CVE-2010-0488)

Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in the way that Internet Explorer handles content using specific encoding strings when submitting data. The vulnerability is due to the way Internet Explorer handles...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow (CVE-2009-2484)

A buffer overflow vulnerability has been reported in VideoLAN VLC Media Player. The vulnerability is due to a boundary error. Remote attackers can exploit this vulnerability, for example, by enticing target users to open a playlist file having an overly long "smb://" URI that will cause an stack...

Microsoft Word Smart Tags Code Execution (MS06-027; CVE-2006-2492)

A code execution vulnerability exists in Microsoft Office Word software. The vulnerability is due to insufficient validation of certain fields related to the Smart Tags in a Word document. An attacker may exploit this vulnerability by enticing a user to open a crafted Word file, which may result ...