Digium Asterisk Invalid RTP Payload Type Number Memory Corruption (CVE-2008-1289)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow (CVE-2009-1568)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from a web browser. Novell iPrint Client is bundled with an ActiveX control that implements various functions. A buffer overflow vulnerability exists in Novell iPrint Client. The...

CA BrightStor ARCserve Backup Universal Agent Buffer Overflow (CVE-2005-1018)

Computer Associates CA BrightStor ARCserve Backup software offers data protection for distributed servers, clients, databases and applications. The CA backup servers are capable of backing up files as well as system settings. The backups are performed across a local network using the UniversalAge...

Arkeia Network Backup Client Buffer Overflow (CVE-2005-0491)

Arkeia Backup is a commercial network backup software that runs on a variety of platforms including AIX, FreeBSD, HP-UX, Linux, MacOS, NetWare, OpenBSD, Solaris, Tru64 Unix, and Windows. There exists an unchecked buffer vulnerability in the Arkeia Network Backup agent module. A crafted message ca...

Citrix Systems Multiple Products IMA Service Buffer Overflow (CVE-2008-0356)

The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Independent...

Yahoo! Messenger File Transfer Filename Spoofing (CVE-2005-0243)

Yahoo Messenger is a service providing instant messages, similar to MSN Messenger and ICQ. Yahoo! Messenger allows users to see when their friends come online, send instant messages, join chat rooms, and exchange files. There exists a vulnerability in the way Yahoo! Messenger displays file names ...

Internet Explorer Malformed GIF File Double Free (MS04-025; CVE-2003-1048)

The Graphics Interchange Format GIF defines a file format intended for the on-line transmission and interchange of raster graphic data. It uses the LZW compression algorithm to minimize file sizes. A double free vulnerability exists in the way Microsoft Internet Explorer handles images of the GIF...

VERITAS NetBackup vmd Shared Library Buffer Overflow (CVE-2005-3116)

The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...

Novell iManager Tomcat HTTP POST Request Handling Denial of Service (CVE-2006-4517)

Novell iManager is a web-based administration console that provides management of many other Novell products. During installation, if the Windows Web Publishing Services IIS is not available, the installation program will install the Apache HTTP server. The iManager service itself is a Java web...

Novell Groupwise Internet Agent RCPT Command Buffer Overflow (CVE-2009-0410)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. The Novell GroupWise Client application is capable of communicating with Novell Group server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. There exists a stack buffer overflo...

Microsoft Web Services on Devices API Memory Corruption (MS09-063; CVE-2009-2512)

The WSDAPI is an implementation of the Devices Profile for Web Services DPWS for Windows Vista and Windows Server 2008. The DPWS constrains Web Services specifications so that clients can easily discover devices. A remote code execution vulnerability has been reported in the Web Service on Device...

Serv-U FTP Server Timezone MDTM Buffer Overflow (CVE-2004-0330)

Serv-U FTP Server is a widely-used FTP server that includes enterprise-grade features such as SSL support, ODBC and Windows NT/SAM user account management, virtual directories, compression etc. By default configuration, Serv-U FTP Server listens on 21/TCP for incoming FTP request. There exists a...

Oracle Database Server SYS.LT.FINDRICSET Function SQL Injection (CVE-2007-5511)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Microsoft Exchange OWA Cross-Site Scripting and Spoofing (MS04-026; CVE-2004-0203)

Microsoft Exchange Outlook Web Access is a web application that is an alternative to Microsoft Outlook. It allows users to access their emails and public folders using a web browser. Outlook Web Access is implemented in ASP and is hosted on a system with Internet Information Server IIS installed...

CVS File Existence Information Disclosure (CVE-2004-0788)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524)

LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been discovered in the Microsoft Windows Local Security Authority...

Update Protection against Adobe JRun 4 Management Console Cross-Site Scripting Vulnerability (APSB09-12)

A Cross Site Scripting XSS vulnerability has been discovered in Adobe JRun Management Console. JRun is an application server based on Java 2 Platform, Enterprise Edition J2EE. It works with popular Web servers including Apache and IIS. A remote attacker could exploit this issue to execute a...

Novell GroupWise Email Address Processing Buffer Overflow (CVE-2009-1636)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. A buffer overflow vulnerability has been reported in Novell GroupWise Internet Agent GWIA software.The vulnerability is due to an error while processing specially crafted SMTP requests.Specifically, th...

Microsoft Works Oversized Font Buffer Overflow (MS09-024; CVE-2009-1533)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite.The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. A remote code execution vulnerability has been discovered in Microsoft Works...

Update Protection against Microsoft Windows GDIplus GpFont.SetData Integer Overflow

A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. The vulnerability occurs when an application that uses the affected...

Update Protection against Akamai Download Manager Arbitrary Program Execution

In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...

WSX Files (CVE-2008-2253)

A server-side playlist SSPL is a list that identifies what content is played for a client, the time at which it is played, and the order in which it is played. WSX is a document used as SSPL by Windows Media server. A remote code execution vulnerability was reported in Windows Media Player 11. Th...

Microsoft Excel Axisparent Record Index Handling Code Execution (MS08-043; CVE-2008-3004)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel handles index values. The vulnerability is due to an error in Microsoft Excel that fails to properly validate index values when loading Excel files into memor...

Update Protection against TFTP Server Error Packet Handling Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in TFTP Server. The Trivial File Transfer Protocol TFTP is used for file transfer, allowing a remote user to download or upload files to the server. TFTP Server is an open source TFTP server service that facilitates the transfer of files to or fro...

Preemptive Protection against Microsoft Windows DNS Server Spoofing Vulnerability (MS07-062)

A DNS Cache Poisoning vulnerability has been reported in Microsoft DNS servers. DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged...

Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)

Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications, and web services.The vulnerability is due to an error in the Microsoft Visual...

Preemptive Protection against Microsoft Agent Remote Code Execution Vulnerability (MS07-051)

A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier. A remote attacker can exploit this issue to execute arbitrary code on the affected...

Symantec Products SupportSoft ActiveX Control Multiple Buffer Overflows (CVE-2006-6490)

Multiple vulnerabilities have been reported in Symantec SupportSoft ActiveX controls. SupportSoft provides third party ActiveX controls used for remote assistance and other technical support functions. A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The...

Preemptive Protection against Mercury Mail IMAP Buffer Overflow Vulnerability

Multiple buffer overflow vulnerabilities exist in Mercury Mail Transport System. Mercury Mail Transport System is a free mail server program that supports various email access and exchange protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing...

Trend Micro OfficeScan Client ActiveX Control Buffer Overflow (CVE-2007-0325)

A vulnerability has been reported in the Trend Micro OfficeScan Client ActiveX control.OfficeScan Client is an integrated client which provides security protection for the network endpoints.A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The vulnerabili...

Nagios IM Command Injection (CVE-2019-9202)

A command injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Win32 Kernel Subsystem Elevation of Privilege (CVE-2022-41113)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Linux Kernel Privilege Escalation (CVE-2022-0847)

A privilege escalation vulnerability exists in Linux Kernel. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-46: CVE-2022-38449

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Cisco NFVIS Improper Access Control (CVE-2021-34746)

An improper access control vulnerability exists in Cisco NFVIS. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35670)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Win32k Elevation of Privilege (CVE-2022-34699)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine OPManager SQL Injection (CVE-2022-29535)

An SQL injection vulnerability exists in Zoho ManageEngine OPManager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Aruba ArubaOS Memory Corruption (CVE-2022-23676)

A memory corruption vulnerability exists in Aruba ArubaOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

QNAP FileStation Cross Site Scripting (CVE-2018-19953)

A cross site scripting vulnerability exists in QNAP FileStation. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Zyxel USG Command Injection (CVE-2022-30525)

A command injection vulnerability exists in Zyxel USG. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows ALPC Elevation of Privilege (CVE-2022-23279)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-29142)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-16: CVE-2022-27801)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows DWM Core Library Elevation of Privilege (CVE-2022-24546)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

D-Link DSL-2760U Gateway Cross Site Scripting (CVE-2013-5223)

A cross-site scripting vulnerability exists in D-Link DSL-2760U Gateway. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-21990)

A remote code execution vulnerability exists in Microsoft Remote Desktop Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)

An authentication bypass vulnerability exists in Zabbix Web Frontend. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

Ericsson Network Location Command Injection (CVE-2021-43339)

A command injection vulnerability exists in Ericsson Network Location. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-43226)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...