13538 matches found
Microsoft Visual Studio dbp and sln File Handling Buffer Overflow (CVE-2006-1043)
The Microsoft Visual Studio 6.0 integrated development environment IDE suite is designed for building Windows based applications and Web solutions. The product contains several tools which can be used to design programs in languages such as C++, or Basic. A development environment in Visual Studi...
Microsoft Visual FoxPro vfp6r.dll DoCmd ActiveX Control Command Execution (CVE-2008-0236)
Microsoft Visual FoxPro 6.0 is designed for building data-centric Windows applications. Visual FoxPro 6.0 is shipped with a set of various ActiveX controls that are registered on the host upon installation. Specifically, an ActiveX control vfp6r.dll is included. There exists an access control...
JScript Scripting Engine Web Pages Decoding Code Execution (MS09-045; CVE-2009-1920)
JScript is an interpreted, object-based scripting language that is often used to make Web sites more flexible or interactive. A remote code execution vulnerability has been reported in the way that the JScript scripting engine decodes script in Web pages. The vulnerability is due to a memory...
Microsoft Workstation Service NetrGetJoinInformation Corruption (MS09-041; CVE-2009-1544)
Microsoft Windows Workstation Service routes local file system requests and remote file or print network requests via Remote Procedure Call RPC. RPC is a protocol that a program can use to request a service from another program which is located on another computer in a network. An elevation of...
Microsoft Works Oversized Font Buffer Overflow (MS09-024; CVE-2009-1533)
Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite.The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. A remote code execution vulnerability has been discovered in Microsoft Works...
Microsoft Excel QSir and QSif Records Pointer Corruption (MS09-021; CVE-2009-1134)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...
Internet Explorer DOM Manipulations Improper Handling (MS09-019; CVE-2009-1531)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...
Microsoft PowerPoint Converter NoteSlide Record Memory Corruption (MS09-017; CVE-2009-0220)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...
Microsoft PowerPoint Converter GuideAtom Record Handling Error (MS09-017; CVE-2009-0225)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A memory corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted...
Microsoft Excel TXO and OBJ Records Parsing Memory Corruption (MS08-074; CVE-2008-4265; CVE-2009-0100)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code ...
Protection against Microsoft Windows HTTP Services Certificate Name Mismatch Remote Code Execution Vulnerability (MS09-013)
A spoofing vulnerability has been reported in Microsoft Windows HTTP Services. Windows HTTP Services WinHTTP provides developers with an HTTP client application programming interface API to send requests through the HTTP protocol to other HTTP servers. A remote attacker may exploit this issue to...
Update Protection against Microsoft Windows GDIplus GpFont.SetData Integer Overflow
A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. The vulnerability occurs when an application that uses the affected...
Preemptive Protection against Novell Groupwise Internet Agent RCPT Command Buffer Overflow
A buffer overflow vulnerability was reported in Novell GroupWise, a client-server collaborative software and email system provided by Novell. The vulnerability is due to a boundary error while processing specially crafted SMTP requests. Remote attackers can exploit this vulnerability to execute...
Internet Explorer WebDav Pathname Code Execution (MS08-073; CVE-2008-4259)
A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer accesses uninitialized memory in certain situations. The vulnerability is due to a memory corruption error in Internet Explorer when it attempts to access uninitialized memory in certain situations. An...
Microsoft Windows Message Queuing Service Queue Name Handling (MS08-065) - ver 2 (CVE-2008-3479)
Microsoft Message Queuing MSMQ is a component of Microsoft Windows designed to act as a message portal between a set of applications requiring message exchange functionality. MSMQ enables applications that are running at different times to communicate across heterogeneous networks and across...
Update Protection against Novell eDirectory SOAP Handling Accept Language Header Overflow
A buffer overflow vulnerability exists in Novell eDirectory Directory Services over SOAP. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based...
Security Best Practice: Familiarize Yourself with the Network Quota Protection
Network Quota enforces a limit upon the number of connections that are allowed from the same source IP, to protect against Denial Of Service attacks...
Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)
Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...
Microsoft Media Player SAMI Format Parsing Code Execution (MS08-033; CVE-2008-1444)
Microsoft Synchronized Accessible Media Interchange SAMI is designed to simplify creating captions for media playback on a PC. SAMI captions coexist with digital media as separate, simple text files. A remote code execution vulnerability has been identified in Microsoft Windows Media Player which...
Internet Explorer HTML Rendering Memory Corruption (MS08-010; CVE-2008-0076)
Microsoft Internet Explorer is the most widely used Internet browser. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer when rendering HTML documents with certain layout combinations. A remote attacker could exploit this issue by convincing a user to visit a...
Microsoft Visual FoxPro ActiveX Control Buffer Overflow (MS08-010; CVE-2007-4790)
Microsoft Visual FoxPro is an application development tool for building database applications. This vulnerability is due to a memory corruption error in certain ActiveX objects of Microsoft Visual FoxPro when it is used in Microsoft Internet Explorer. A remote attacker could exploit this issue by...
Preemptive Protection against Microsoft Windows DNS Server Spoofing Vulnerability (MS07-062)
A DNS Cache Poisoning vulnerability has been reported in Microsoft DNS servers. DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged...
Trend Micro OfficeScan Client ActiveX Control Buffer Overflow (CVE-2007-0325)
A vulnerability has been reported in the Trend Micro OfficeScan Client ActiveX control.OfficeScan Client is an integrated client which provides security protection for the network endpoints.A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The vulnerabili...
Tenda M3 Router Command Injection (CVE-2022-26289)
A command injection vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
SmarterTools SmarterMail Directory Traversal (CVE-2019-7213)
A directory traversal vulnerability exists in SmarterTools SmarterMail. Successful exploitation of this vulnerability could allow a remote attacker to upload or delete arbitrary files on the vulnerable server...
Microsoft Azure Service Fabric Explorer Cross Site Scripting (CVE-2022-35829)
A cross-site scripting vulnerability exists in Microsoft Azure Service Fabric Explorer. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-46: CVE-2022-42339)
A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Adobe ColdFusion Heap-based Buffer Overflow (APSB22-44: CVE-2022-35711)
A buffer overflow vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows Mixed Reality Developer Tools Information Disclosure (CVE-2022-37974)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Windows ALPC Elevation of Privilege (CVE-2022-34725)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
FlatCore CMS Server-Side Request Forgery (CVE-2021-41403)
A server-side request forgery vulnerability exists in FlatCore CMS. Successful exploitation of this vulnerability could allow an attacker to access internal resources...
Microsoft Windows Installer Elevation of Privilege (CVE-2022-30147)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Atlassian Confluence Remote Code Execution (CVE-2022-26134)
A remote code execution vulnerability exists in Atlassian Confluence. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Support Diagnostic Tool Remote Code Execution (CVE-2022-30190)
A remote code execution vulnerability exists in Microsoft Support Diagnostic Tool, also known as, "Follina". Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Use After Free (APSB22-16: CVE-2022-28230)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Zimbra Webmail Cross Site Scripting (CVE-2022-24682)
A cross site scripting vulnerability exists in Zimbra Webmail. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Adobe Magento Commerce Reflected Cross Site Scripting (CVE-2021-21029)
A reflected cross site scripting vulnerability exists in Adobe Magento Commerce. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Adobe Acrobat and Reader Out-of-bounds Read (APSB22-01: CVE-2021-44715)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Adobe Acrobat and Reader Violation of Secure Design Principles (APSB22-01: CVE-2021-44714)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Windows Print Spooler Elevation of Privilege (CVE-2021-41333)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Nagios XI Command Injection (CVE-2021-40345)
A command injection vulnerability exists in Nagios Xi. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2021-34449)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Core External Entity Injection (CVE-2021-29447)
An XXE vulnerability exists in WordPress Core. The vulnerability is due to insufficient validation of XML data when parsing RIFF WAV file metadata...
Google Chrome Buffer Overflow (CVE-2021-21153)
A buffer overflow vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Netgate pfSense Cross-Site Scripting (CVE-2021-27933)
A stored cross-site scripting vulnerability exists in Netgate pfSense. The vulnerability is due to improper validation of the descr parameter in the serviceswoledit.php...
Microsoft Windows SMB Information Disclosure (CVE-2021-28324)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Jenkins Remote API Information Disclosure (CVE-2017-1000395)
An information disclosure vulnerability exists in Jenkins Remote API. Successful exploitation of this vulnerability could allow a remote attacker to gain information about Jenkins user accounts...
yWorks yEd Desktop Remote Code Execution (CVE-2020-25216)
A remote code execution vulnerability exists in yWorks yEd Desktop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Amino Communications Command Injection (CVE-2020-10209)
A command injection vulnerability exists in Amino Communications. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Asmax Ar-804gu Router Command Injection (CVE-2009-5156)
A command injection vulnerability exists in Asmax Ar-804gu Routers. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary commands on the target machine...