Microsoft DirectX Crafted MJPEG Stream Handling Code Execution (MS08-033; CVE-2008-0011)

Microsoft DirectX is a software component which contains a set of APIs that provide access to graphics acceleration chips and sound cards and other types of media hardware. These APIs control low-level functions including graphics acceleration, support for input devices such as joysticks,...

Microsoft Windows SMB Client Pool Corruption (MS10-006; CVE-2010-0016)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Server Message Block SMB Protocol. The vulnerability is due to an error in the Microsoft SMB implementation that improperly...

RealNetworks Helix Server RTSP SET_PARAMETERS Request Denial of Service (CVE-2009-2533)

Helix Server is a multi media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...

CA BrightStor ARCserve Backup Universal Agent Buffer Overflow (CVE-2005-1018)

Computer Associates CA BrightStor ARCserve Backup software offers data protection for distributed servers, clients, databases and applications. The CA backup servers are capable of backing up files as well as system settings. The backups are performed across a local network using the UniversalAge...

Opera Browser file URI Handling Buffer Overflow (CVE-2008-5178)

Opera is a web browser and Internet suite developed by the Opera Software company. Opera handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, IRC online chatting, downloading files via BitTorrent, and reading web feeds. The...

Microsoft DirectX RLE Compressed Targa Image File Heap Overflow (CVE-2006-4183)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. The three-dimension 3D acceleration engine of DirectX is known as Direct3D. Direct3D include texture rendering, which displays bitmap images on the surface of 3D...

CA BrightStor ARCserve Backup caloggerd Opcode 79 Stack Buffer Overflow (CVE-2008-2242)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

MediaWiki Language Option PHP Code Execution (CVE-2005-4031)

MediaWiki is a web-based enterprise collaboration platform developed in the PHP scripting language. The software is a set of CGI programs that are loaded and executed by an HTTP server. It typically runs as a document management system, or a knowledge base. The web content of a MediaWiki...

Oracle Database sys.pbsde.init Procedure Buffer Overflow (CVE-2005-3438)

Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...

Microsoft Exchange Server XEXCH50 Command Buffer Overflow (MS03-046; CVE-2003-0714)

The Microsoft Exchange Server is an implementation of an email server capable of handling numerous Internet protocol, including the Simple Mail Transfer Protocol SMTP. A security vulnerability exists in the Internet Mail Service in Exchange Server 5.5 and Exchange 2000 that could allow an...

Microsoft Office Word Legacy File Remote Code Execution (MS09-068; CVE-2009-3135)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word.The vulnerability is due to an error in Microsoft Word that fails to properly parse specially crafted Word files. A remote attacker could trigger this flaw by convinci...

EMC Dantz Retrospect Backup Agent Denial of Service (CVE-2006-0995)

The EMC Retrospect Backup product suite is based on an agent and server model. The backup server can initiate backups, backup remote client machine, as well perform scheduled backups. The agent component is installed on a machine that is to be backed up by the server. The agent can be made to...

Castle Rock Computing SNMPc Network Manager Community String Buffer Overflow (CVE-2008-2214)

SNMPc is a secure distributed network management system developed by Castle Rock Computing. SNMPc uses Simple Network Management Protocol SNMP to communicate with other network entities. A buffer overflow vulnerability exists in Castle Rock Computing SNMPc Network Manager. The vulnerability can b...

CA BrightStor ARCserve Backup Message Engine Insecure Methods (CVE-2007-5328)

CA BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exist unsecured Remote...

WordPress RSS feed Generator self_link HTTP_HOST Cross-Site Scripting (CVE-2008-5278)

WordPress is an opensource php-based blog publishing platform. It offers several features such as multi-author editing capability, automatic formatting of text and an architecture which supports plugins to further extend its functionality. There exists a cross-site script insertion vulnerability ...

Microsoft Excel QSir and QSif Records Pointer Corruption (MS09-021; CVE-2009-1134)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

Microsoft Excel String Copy Stack-Based Overrun (MS09-021; CVE-2009-0559)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. A...

Microsoft IIS WebDAV Extension URL Decoding Security Bypass (CVE-2009-1535)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allow clients to publish, lock, and manage resources on the Web. An elevation of privilege vulnerability has been reported in the Microsoft Windows WebDAV extension for IIS. The vulnerability is due to an error i...

Microsoft PowerPoint Converter GuideAtom Record Handling Error (MS09-017; CVE-2009-0225)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A memory corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted...

Protection against Microsoft Windows HTTP Services Certificate Name Mismatch Remote Code Execution Vulnerability (MS09-013)

A spoofing vulnerability has been reported in Microsoft Windows HTTP Services. Windows HTTP Services WinHTTP provides developers with an HTTP client application programming interface API to send requests through the HTTP protocol to other HTTP servers. A remote attacker may exploit this issue to...

Preemptive Protection against Novell Groupwise Internet Agent RCPT Command Buffer Overflow

A buffer overflow vulnerability was reported in Novell GroupWise, a client-server collaborative software and email system provided by Novell. The vulnerability is due to a boundary error while processing specially crafted SMTP requests. Remote attackers can exploit this vulnerability to execute...

Internet Explorer WebDav Pathname Code Execution (MS08-073; CVE-2008-4259)

A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer accesses uninitialized memory in certain situations. The vulnerability is due to a memory corruption error in Internet Explorer when it attempts to access uninitialized memory in certain situations. An...

Microsoft Office OneNote URL Validation Error (MS08-055; CVE-2008-3007)

Microsoft Office OneNote is a tool for note-taking, information gathering, and multi-user collaboration that visualizes notes as a two-dimensional page. A remote code execution vulnerability has been reported in the way that Microsoft Office handles specially crafted OneNote files. The...

Microsoft Excel COUNTRY Record Parsing Memory Corruption (MS08-043; CVE-2008-3006)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel parses record values. The vulnerability is due to an error in Microsoft Excel that fails to perform sufficient validation when parsing record values while...

Preemptive Protection against CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

A buffer overflow vulnerability was discovered in CA eTrust Secure Content Manager. CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware,...

Update Protection against HP OpenView Network Node Manager HTTP Handling Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in HP OpenView Network Node Manager. The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running...

Microsoft Office Outlook mailto URI Handling Code Execution (MS08-015; CVE-2008-0110)

Microsoft Office Outlook is a personal information manager that provides an e-mail application, a calendar and task and contact management.A remote code execution vulnerability has been reported in Microsoft Office Outlook. The vulnerability is due to an error in Microsoft Office Outlook that fai...

Microsoft IIS HTR Request Buffer Overflow (CVE-2002-0071)

...

Preemptive Protection against Malformed DNS Resource Records Vulnerability (MS06-041)

The Domain Name System DNS client service resolves and caches DNS names. The Microsoft DNS Client service fails to handle specific overly long resource records. An attacker could exploit the vulnerability by sending a specially crafted DNS record to an affected client. Successful exploitation cou...

Security Best Practice: Protect Yourself from DCOM vulnerabilities

The Distributed Component Object Model DCOM is a protocol that enables software components to communicate directly over a network. Previously called "Network OLE," DCOM is designed for use across multiple network transports, including Internet protocols such as HTTP.There are several known and...

Update Protection against AWStats Remote Command Execution Vulnerability

AWStats is a free tool that collects and graphically displays advanced web, ftp or mail server statistics. Lack of input validation on one of the parameters may allow an attacker to compromise a vulnerable server. Successful exploitation allows remote attackers to execute arbitrary commands under...

Update Protection against Microsoft JScript Remote Code Execution Vulnerability (MS06-023)

JScript is Microsoft's implementation of the ECMA 262 language specification ECMAScript Edition 3. Microsoft JScript contains a memory corruption vulnerability. By convincing a user to visit a Web site or read an e-mail message containing a specially crafted JScript file, a remote attacker may be...

Microsoft Windows Web Client Remote Code Execution (MS06-008; CVE-2006-0013)

Web Client WebDAV is a system service that allows Web-based Distributed Authoring and Versioning. Remote code execution vulnerability exists in the way that Windows processes Web Client requests that could allow an attacker who successfully exploited this vulnerability to take complete control of...

Built-In Protection against IGMPv3 Denial of Service Vulnerability (MS06-007)

A denial of service vulnerability exists in the handling of IGMPv3 Internet Group Management Protocol. IGMP is a routing protocol used by hosts and routers to dynamically register and discover multicast group memberships. By sending a specially crafted IGMP packet, a remote attacker could stop th...

Update Protection against a Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange (MS06-003)

A vulnerability exists in the way Microsoft Exchange server and Microsoft Outlook products handle the decoding of the Transport Neutral Encapsulation TNEF MIME attachment. The TNEF format is used by many Microsoft products such as Exchange and Outlook to transfer messages formatted as Rich Text...

Multiple Products Malformed GIF Image File Handling Buffer Overflow (CVE-2005-0243; CVE-2005-0399; CVE-2007-1071)

...

IGMP (CAN-2004-1137)

...

MS-SQL Monitor Protocol (CVE-2002-0649; CVE-2002-0650)

...

Foxit Reader Out-of-Bounds Read (CVE-2018-17686)

An out-of-bounds read vulnerability exists in Foxit Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Delta Electronics DIAEnergie SQL Injection (CVE-2022-1366)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to insufficient input validation when processing requests...

Zoho ManageEngine SQL Injection (CVE-2022-27908)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the Inventory Reports module...

Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)

An authentication bypass vulnerability exists in multiple Fortinet products. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Microsoft Windows Mixed Reality Developer Tools Information Disclosure (CVE-2022-37974)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-37957)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34222)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Storage Elevation of Privilege (CVE-2022-30220)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-32: CVE-2022-34232)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Support Diagnostic Tool Remote Code Execution (CVE-2022-30190)

A remote code execution vulnerability exists in Microsoft Support Diagnostic Tool, also known as, "Follina". Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Kaseya VSA Remote Code Execution (CVE-2018-20753)

A remote code execution vulnerability exists in Kaseya VSA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-16: CVE-2022-28230)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...