13538 matches found
Microsoft Windows True Type Font Parsing Information Disclosure (MS16-120: CVE-2016-3209)
An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the True Type Font TTF driver handles objects in memory. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted EMF fil...
SixApart MovableType Storable Perl Code Execution (CVE-2015-1592)
A vulnerability was discovered in SixApart MovableType. This is due to a vulnerability of storable perl module. A remote attacker can exploit this weakness by execute arbitrary code via a crafted request...
Weak SSL 3DES Cipher Suites (CVE-2016-2183)
3DES is a widely supported stream cipher often preferred by TLS servers and other servers using encrypted sessions. Recent cryptanalysis results one of which is the SWEET32 exploit biases in the 3DES keystroke to recover repeatedly encrypted plain-texts. As a result 3DES can no longer be seen as...
Accellion FTA getStatus verify_oauth_token Command Execution (CVE-2015-2857)
A command execution vulnerability exists in Accellion File Transfer appliance. The vulnerability is due to insufficient sanitization of the oauthtoken parameter. A remote attacker can exploit this vulnerability by sending crafted request to the affected appliance...
Microsoft Office Memory Corruption (MS16-107: CVE-2016-3357)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Microsoft Office Memory Corruption (MS16-107: CVE-2016-3365)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Rockwell Automation MicroLogix Remote Code Execution (CVE-2016-5645)
A remote code execution vulnerability exists in Rockwell Automation MicroLogix. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office Memory Corruption (MS16-029: CVE-2016-0021)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Ignite Realtime Openfire group-summary.jsp Cross-Site Scripting (CVE-2015-6972)
A cross-site scripting vulnerability has been reported in Ignite Realtime Openfire Server. The vulnerability is due to insufficient validation of the "search" parameter within the group-summary.jsp page. By convincing an authenticated user to visit a malicious website, a remote attacker can explo...
Microsoft .NET Silverlight Manifest Resource File Information Disclosure (CVE-2015-6114)
An information disclosure vulnerability exists in Microsoft .NET Silverlight manifest resource parsing functionality. The vulnerability is due to an error while processing a corrupted manifest. An attacker can exploit this vulnerability by supplying a specially crafted resource through a .NET or...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6083)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Xlink FTP Server Request Buffer Overflow (CVE-2006-5792)
A buffer overflow vulnerability exists in Xlink FTP server that comes bundled with Omni-NFS Enterprise 5.2. A remote attacker may send an overly long FTP request to the server which allows arbitrary code execution...
Microsoft Edge XSS Filter Bypass (MS15-107: CVE-2015-6058)
An XSS filter bypass vulnerability exists in Microsoft Edge. A remote attacker could exploit this issue by convincing target users to view a web page containing malicious JavaScript code with an effected version of Microsoft Edge. Successful exploitation could allow an attacker to take any action...
Oracle Endeca Information Discovery Integrator ETL Server CopyFile Directory Traversal (CVE-2015-2604)
A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the CopyFile operation. By sending crafted SOAP requests to the target system, a remote authenticate...
Oracle Endeca Information Discovery Integrator ETL Server MoveFile Directory Traversal (CVE-2015-2605)
A directory traversal vulnerability has been reported in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to a lack of input validation. A remote attacker can exploit this vulnerability by sending crafted SOAP requests to the target system, leading to informatio...
Microsoft Internet Explorer Table Handling Arbitrary Code Execution (CVE-2015-2502)
A vulnerability exists in the way Microsoft Internet Explorer handles the layout cache of tables. This vulnerability can be used to corrupt arbitrary memory and can lead to arbitrary code execution...
Google Android Stagefright 3GPP Metadata Buffer Overread (CVE-2015-3826)
A denial of service vulnerability ,known as Stagefright Vulnerability, has been reported in Android devices core. The vulnerability is due to a buffer overread in 3GPP Metadata. Successful exploitation could result in a denial of service condition...
Panasonic Security API SDK MulticastAddr Stack Buffer Overflow (CVE-2015-4648)
A buffer overflow vulnerability exists in Panasonic Security API SDK, Ipropsapi.ipropsapiCtrl.1 ActiveX Control component. The vulnerability is due to a lack of boundary checks on a parameter passed to the MulticastAddr method. A remote attacker can exploit this vulnerability by enticing the vict...
IBM Tivoli Storage Manager FastBack Mount Stack Buffer Overflow (CVE-2015-0120)
A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Mount. The vulnerability is due to insufficient input validation of parameters to the CRYPTOSEncryptBufferToBuffer function. A remote unauthenticated attacker could exploit this vulnerability by sending crafted...
Microsoft Internet Explorer Memory Corruption (MS15-056: CVE-2015-1730)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
IBM Informix Client NFX Buffer Overflow - Ver2 (CVE-2009-3691)
A buffer overflow vulnerability has been reported in IBM Informix Client Software Development Kit and Ibm Informix Connect Runtime. An attacker could exploit this vulnerability via a .nfx file with a crafted HostSize, and possibly ProtoSize and ServerSize, field that triggers a stack-based buffer...
Microsoft Windows AVI File Data Validation Integer Overflow (MS09-038) - Ver2 (CVE-2009-1546)
Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF.This file type used with applications that capture, edit, and play back audio-video sequences. The vulnerability is due to an error in the Windows component responsible for processing AVI files that does not...
Schneider Electric Pelco DS-NVs Rvctl.RVControl Buffer Overflow (CVE-2015-0982)
A buffer overflow vulnerability exists in Schneider Electric Pelco DS-NV Software package. The vulnerability is due to insufficient input validation on a user-supplied input in the SetText method before it is copied into a fixed length buffer on stack. A remote unauthenticated attacker can exploi...
AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution - Ver2 (CVE-2014-5210)
The vulnerability is due to a failure to safely sanitize remotetask SOAP requests within Util.pm. this vulnerability can be exploit by sending crafted requests to the affected service. Successful exploitation could result in arbitrary command execution with root privileges...
Microsoft Excel Cell Length Buffer Overflow (MS04-033) - Ver2 (CVE-2004-0846)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available in several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
Oracle Demantra 1221 Arbitrary File Disclosure - Ver2 (CVE-2013-5877)
An information disclosure vulnerability has been reported in Oracle Supply Chain Products Suite. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Corel Multiple Products Multiple Insecure Library Loading (CVE-2014-8393)
Multiple insecure library loading vulnerabilities have been reported in multiple Corel products. The vulnerabilities are due to the insecure loading of a number of libraries. These include but are not limited to, Wintab32.dll, TDMgd3.089.dll, wacommt.dll, and quserex.dll. A remote attacker could...
Microsoft Word Memory Corruption (MS15-012: CVE-2015-0064)
A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially craft...
Browserify Node.js Remote Code Execution (CVE-2014-7192)
A remote code execution was discovered in Browserify Node.js. An unauthenticated attacker may use this vulnerability to execute code on the vulnerable server...
ManageEngine Multiple Products WsDiscoveryServlet Directory Traversal (CVE-2014-5302)
A directory traversal vulnerability exists in ManageEngine ServiceDesk Plus, AssetExplorer and IT360. The vulnerability is due to lack of authentication and insufficient input validation on the "computerName" parameter sent in HTTP requests to the WsDiscoveryServlet. A remote unauthenticated...
Golden FTP PASS Buffer Overflow (CVE-2006-6576)
Golden FTP Server is prone to a remote buffer-overflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer.Exploiting this vulnerability may allow remote attackers to execute arbitrary code in the context of the affected...
Joomla Component com_cartweberp Local File Inclusion (CVE-2010-0982)
A file inclusion vulnerability has been reported in Joomla Com Cartweberp. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PHP Nuke Module htmltonuke php Remote File Inclusion (CVE-2006-0308)
A file inclusion vulnerability has been reported in Htmltonuke. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_content SQL Injection (CVE-2008-6923)
SQL injection vulnerability has been reported in Joomla Com Content. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Foxit Reader PDF Files Processing Buffer Overflow (CVE-2009-0837)
There exists a Stack-based buffer overflow in Foxit Reader, which allows remote attackers to execute arbitrary code via a long relative path or absolute path in the filename argument in an action...
LifeSize Room Security Bypass and Command Injection Vulnerabilities (CVE-2011-2763)
Multiple vulnerabilities exist in the LifeSize Room appliance. The vulnerabilities are due Unauthenticated OS command injection through the web interface.A remote attacker can exploit those vulnerabilities by sending crafted requests to the affected service...
Microsoft Internet Explorer Elevation of Privilege (MS14-056; CVE-2014-4123)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Apache HTTP Server mod_deflate Denial of Service (CVE-2014-0118)
A denial of service vulnerability exists in Apache HTTP server. The vulnerability exists in the moddeflate module and is due to a resource exhaustion that is related to request body decompression configuration. A remote, unauthenticated attacker can leverage this vulnerability by sending a...
Apache HTTP Server mod_status Heap Buffer Overflow (CVE-2014-0226)
A heap buffer overflow vulnerability exists in Apache httpd. The vulnerability is due to a race condition in the modstatus module running on a server with threaded MPM.Successful exploit may result in information disclosure or code execution...
HP Intelligent Management Center BIMS UploadServlet Information Disclosure (CVE-2014-2618)
An information disclosure vulnerability exists in the BIMS add-in module of HP Intelligent Management Center. The vulnerability is due to lack of authentication and insufficient input validation in the UploadServlet servlet when processing HTTP request parameters. By sending crafted HTTP requests...
libav LZO Integer Overflow (CVE-2014-4609)
A code execution vulnerability exists in the libav library. The vulnerability is due to an integer overflow while processing literal runs in the LZO compressed data. A remote unauthenticated attacker could exploit this vulnerability by enticing a target user to open a crafted file with an...
Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution (CVE-2014-3915)
Multiple vulnerabilities exist in Rocket Servergraph, an interface for monitoring backup solutions such as IBM Tivoli Storage Manager, Symantec NetBackup etc. These vulnerabilities are due to input validation errors when handling requests to the URIs userRequest and tsmRequest. A remote...
Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1800)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)
Multiple vulnerabilities have been reported in Advantech WebAccess. A remote attacker can exploit these vulnerabilities by sending a specially crafted request to the affected server...
Schneider Electric ClearSCADA OPF File Parsing Out of Bounds Array Indexing (CVE-2014-0779)
A code execution vulnerability has been reported in Schneider Electric ClearSCADA. The vulnerability is due improper validation of a length parameter that is used to index an array in the OPF File parsing component. A remote attacker could exploit this vulnerability by enticing the target user to...
Novell ZENworks Configuration Management PreBoot Directory Traversal (CVE-2013-3706)
A directory traversal vulnerability has been reported in Novell ZENworks Configuration Manager. The vulnerability is due to the preboot service which supports an opcode that allows files to be downloaded through directory traversal. A remote attacker can exploit this vulnerability to disclose the...
Microsoft Excel SST Invalid Length Use After Free - Ver2 (CVE-2012-1887)
A use-after-free vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...
Ultra Crypto Component AcquireContext Buffer Overflow - Ver2 (CVE-2007-4903)
A buffer overflow vulnerability has been reported in Ultra Crypto Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Google Android Vold Volume Manager Integer Wrap Root Exploit Privilege Escalation - Ver2 (CVE-2011-1823)
A privilege escalation vulnerability has been reported in Google Android Operating System. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Lenovo Veriface III Plain Image Authentication Bypass - Ver2 (CVE-2009-0655)
An authentication bypass vulnerability has been reported in Lenovo Veriface III. Successful exploitation of this vulnerability could allow a remote attacker to bypass login authentication and gain unauthorized access to the vulnerable system...