Citrix Systems Multiple Products IMA Service Buffer Overflow (CVE-2008-0356)

The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Independent...

Novell eDirectory SOAP Handling Accept Language Header Heap Overflow (CVE-2008-4479)

Novell eDirectory is an X.500 and LDAP compatible directory service software product developed by Novell, Inc. for centrally managing access to resources on multiple servers and computers within a given network. The product is made available for multiple platforms including NetWare, Unix-like...

Novell iManager Tomcat HTTP POST Request Handling Denial of Service (CVE-2006-4517)

Novell iManager is a web-based administration console that provides management of many other Novell products. During installation, if the Windows Web Publishing Services IIS is not available, the installation program will install the Apache HTTP server. The iManager service itself is a Java web...

Microsoft Office Excel SXDB Record Cache Memory Corruption (MS09-067; CVE-2009-3127)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel.The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw b...

Microsoft Web Services on Devices API Memory Corruption (MS09-063; CVE-2009-2512)

The WSDAPI is an implementation of the Devices Profile for Web Services DPWS for Windows Vista and Windows Server 2008. The DPWS constrains Web Services specifications so that clients can easily discover devices. A remote code execution vulnerability has been reported in the Web Service on Device...

Symantec VERITAS Storage Foundation Administrator Service Buffer Overflow (CVE-2008-0638)

Symantec VERITAS Storage Foundation, provides a complete solution for heterogeneous online storage management. Storage Foundation Management Server allows centralized storage management capabilities across a broad array of operating systems and storage hardware. There exists a buffer overflow...

Microsoft Design Tools msdds.dll Memory Corruption (MS05-052; CVE-2005-2127)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on the Component Object Model COM technology. There exists a vulnerability in the Microsoft Design Tools Diagram Surface COM object, an object bundled...

Novell NetMail IMAP APPEND Command Buffer Overflow (CVE-2006-6425)

Novell NetMail is an electronic mail server product. Novell NetMail supports various email access and exchange protocols, including IMAP. The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of...

Digium Asterisk SIP Invalid Response Code Denial of Service (CVE-2007-1594)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

Trend Micro ServerProtect TMregChange Stack Overflow (CVE-2007-4731)

Trend Micro ServerProtect offers anti-virus scanning for servers, detecting and removing viruses from files and compressed files. The product provides centralized control over a Windows-based management console for control of virus outbreaks, virus scanning, virus pattern file updates,...

CA BrightStor ARCserve Backup Message Engine Opcode 47 Buffer Overflow (CVE-2007-0169)

Computer Associates BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including backup and restore, dat...

Novell NetMail IMAP Buffer Overflow (CVE-2005-3314)

The Internet Message Access Protocol IMAP allows the access and manipulation of electronic mail. Novell Netmail is a mail server product that relies on Novell eDirectory and Novell Nsure Audit products. It supports the IMAP protocol as well as other well known internet mail protocols. There exist...

Microsoft Visio Version Number Handling Code Execution (MS07-030; CVE-2007-0934)

Microsoft Visio is a diagramming application that is part of the Microsoft Office suite. Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applicatio...

Apache Struts Classes Directory Traversal (CVE-2008-6505)

Apache Struts is a Java-based web application development framework. Unlike JSP and Servelets, Struts encourage good application design by enforcing MVC Model-View-Controller architecture for separation of concerns like business logic Model from web-page design View and navigational code...

Microsoft Visual FoxPro vfp6r.dll DoCmd ActiveX Control Command Execution (CVE-2008-0236)

Microsoft Visual FoxPro 6.0 is designed for building data-centric Windows applications. Visual FoxPro 6.0 is shipped with a set of various ActiveX controls that are registered on the host upon installation. Specifically, an ActiveX control vfp6r.dll is included. There exists an access control...

Novell GroupWise Email Address Processing Buffer Overflow (CVE-2009-1636)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. A buffer overflow vulnerability has been reported in Novell GroupWise Internet Agent GWIA software.The vulnerability is due to an error while processing specially crafted SMTP requests.Specifically, th...

TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)

TCP/IP is a set of networking protocols that are widely used on the Internet. TCP/IP provides communications across interconnected networks of computers that have diverse hardware architectures and that run various operating systems. Multiple vulnerabilities exist in TCP/IP processing in Microsof...

JScript Scripting Engine Web Pages Decoding Code Execution (MS09-045; CVE-2009-1920)

JScript is an interpreted, object-based scripting language that is often used to make Web sites more flexible or interactive. A remote code execution vulnerability has been reported in the way that the JScript scripting engine decodes script in Web pages. The vulnerability is due to a memory...

Internet Explorer DOM Manipulations Improper Handling (MS09-019; CVE-2009-1531)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...

Microsoft Excel TXO and OBJ Records Parsing Memory Corruption (MS08-074; CVE-2008-4265; CVE-2009-0100)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code ...

Update Protection against Microsoft Windows GDIplus GpFont.SetData Integer Overflow

A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. The vulnerability occurs when an application that uses the affected...

Update Protection against Novell iPrint Client ActiveX Control Multiple Vulnerabilities

Multiple Vulnerabilities have been reported in Novell iPrint Client. Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions...

Microsoft Windows Message Queuing Service Queue Name Handling (MS08-065) - ver 2 (CVE-2008-3479)

Microsoft Message Queuing MSMQ is a component of Microsoft Windows designed to act as a message portal between a set of applications requiring message exchange functionality. MSMQ enables applications that are running at different times to communicate across heterogeneous networks and across...

Update Protection against Novell eDirectory SOAP Handling Accept Language Header Overflow

A buffer overflow vulnerability exists in Novell eDirectory Directory Services over SOAP. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based...

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

Microsoft Windows PGM Packet Handling Denial of Service (MS08-036; CVE-2008-1440)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly validate the option field length of a PGM packet....

Microsoft Media Player SAMI Format Parsing Code Execution (MS08-033; CVE-2008-1444)

Microsoft Synchronized Accessible Media Interchange SAMI is designed to simplify creating captions for media playback on a PC. SAMI captions coexist with digital media as separate, simple text files. A remote code execution vulnerability has been identified in Microsoft Windows Media Player which...

Update Protection against Asterisk Buffer Overflow Vulnerabilities

Two buffer overflow vulnerabilities have been reported in the RTP payload handling code of Asterisk that could allow remote attackers to execute arbitrary code...

Preemptive Protection against Microsoft Windows DNS Server Spoofing Vulnerability (MS07-062)

A DNS Cache Poisoning vulnerability has been reported in Microsoft DNS servers. DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Ipswitch IMail Server IMAP SEARCH Command Date String Stack Overflow (CVE-2007-3925)

...

Preemptive Protection against Digium Asterisk SIP Invalid Response Code Denial of Service Vulnerability

A denial of service vulnerability has been discovered in Digium Asterisk. Asterisk is an open source telephone system. It supports a wide range of Voice over IP VOIP protocols, including SIP. SIP Session Initiation Protocol is a protocol that can establish, modify, and terminate numerous multimed...

Internet Explorer Undisclosed Script Handler Buffer Overflow (MS06-072; CVE-2006-5579)

Microsoft Internet Explorer IE contains a remote code execution vulnerability. By convincing a user to visit a specially crafted Web page, a remote attacker may trigger this vulnerability to deny service from legitimate users by causing the victim's Web browser to crash or execute arbitrary code ...

Preemptive Protection against OpenLDAP Remote Buffer Overflow Vulnerability

A denial of service vulnerability exists in OpenLDAP. OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol LDAP. The vulnerability could be exploited by remote attackers to crash the service or execute arbitrary code via a specially crafted LDAP request ...

Update Protection against Indexing Service Cross-Site Scripting Vulnerability (MS06-053)

A cross-site scripting XSS vulnerability exists in Microsoft Windows Indexing Service. Indexing Service is a feature that supports rapid searching of file contents and properties by extracting information from files and storing it in indexes organized for fast searching. A remote attacker can...

Microsoft Windows Plug and Play Service Buffer Overflow (MS05-039; CVE-2005-1983)

Plug and Play PnP allows the operating system to detect new hardware e.g mouse, a digital camera when you install it on a system. A vulnerability was detected in the Plug and Play PnP service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code...

Zoho ManageEngine SQL Injection (CVE-2021-40493)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the getDataCollectionFailureReason method...

Adobe RoboHelp Server Directory Traversal (CVE-2021-42727)

A directory traversal vulnerability exists in Adobe RoboHelp Server. This vulnerability is caused by input validation flaw when processing fileName parameter...

Zoho ManageEngine ServiceDesk Cross-Site Scripting (CVE-2021-46065)

A cross-site scripting vulnerability exists in Zoho ManageEngine ServiceDesk. The vulnerability is due to improper sanitization of secondary email field parameter...

SolarWinds Orion Arbitrary File Write (CVE-2020-27871)

An arbitrary file write vulnerability exists in SolarWinds Network Configuration Manager. The vulnerability is due to insufficient validation of file types for vulnerability announcement data files in VulnerabilitySettings.aspx, combined with a lack of restriction on destination paths. A remote,...

Linux Kernel Privilege Escalation (CVE-2022-0847)

A privilege escalation vulnerability exists in Linux Kernel. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Zoho ManageEngine SQL Injection (CVE-2022-27908)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the Inventory Reports module...

Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)

An authentication bypass vulnerability exists in multiple Fortinet products. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Adobe ColdFusion Heap-based Buffer Overflow (APSB22-44: CVE-2022-35711)

A buffer overflow vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

D-Link Multiple Products Command Injection (CVE-2018-6530)

A command injection vulnerability exists in multiple D-Link products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Graphics Device Interface Buffer Overflow (CVE-2019-1439)

A heap-based buffer overflow vulnerability exists in the MF3216 component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit the vulnerability by enticing a user to open a specially crafted file and take actions...

Sophos MR3 Firewall Remote Code Execution (CVE-2022-1040)

A remote code execution vulnerability exists in Sophos MR3 Firewall. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Network File System Remote Code Execution (CVE-2022-24491)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TP-Link WR886N Buffer Overflow (CVE-2021-44864)

A buffer overflow vulnerability exists in TP-Link WR886N. Successful exploitation of this vulnerability could result in a denial of service of the affected system...

DIAEnergie Cross-Site Scripting (CVE-2021-44544)

A stored cross-site scripting vulnerability exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing parameters in HandlerEnergyType.ashx endpoint...