EMC Dantz Retrospect Backup Agent Denial of Service (CVE-2006-0995)

The EMC Retrospect Backup product suite is based on an agent and server model. The backup server can initiate backups, backup remote client machine, as well perform scheduled backups. The agent component is installed on a machine that is to be backed up by the server. The agent can be made to...

Castle Rock Computing SNMPc Network Manager Community String Buffer Overflow (CVE-2008-2214)

SNMPc is a secure distributed network management system developed by Castle Rock Computing. SNMPc uses Simple Network Management Protocol SNMP to communicate with other network entities. A buffer overflow vulnerability exists in Castle Rock Computing SNMPc Network Manager. The vulnerability can b...

CA BrightStor ARCserve Backup Message Engine Opcode 47 Buffer Overflow (CVE-2007-0169)

Computer Associates BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including backup and restore, dat...

Ipswitch IMail IMAP Service DELETE Command Buffer Overflow (CVE-2004-1520)

The Internet Message Access Protocol IMAP allows the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server. The protocol allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. There is ...

Microsoft Visual Studio dbp and sln File Handling Buffer Overflow (CVE-2006-1043)

The Microsoft Visual Studio 6.0 integrated development environment IDE suite is designed for building Windows based applications and Web solutions. The product contains several tools which can be used to design programs in languages such as C++, or Basic. A development environment in Visual Studi...

Apple QuickTime obji Atom Parsing Stack Buffer Overflow (CVE-2008-1022)

There exists a stack buffer overflow vulnerability in Apple QuickTime application. The vulnerability is due to improper processing of atoms in QuickTime movie files. A remote attacker may exploit this vulnerability by providing a crafted QuickTime movie file to the target user, causing abnormal...

Symantec AntiVirus RAR Archive Decompression Buffer Overflow (CVE-2005-4438)

Symantec antivirus scanning products are designed for enterprise and home environments for protection from potentially malicious files and network traffic. Numerous Symantec products that incorporate the antivirus scanning capabilities share among them common components and libraries. One such...

TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)

TCP/IP is a set of networking protocols that are widely used on the Internet. TCP/IP provides communications across interconnected networks of computers that have diverse hardware architectures and that run various operating systems. Multiple vulnerabilities exist in TCP/IP processing in Microsof...

Microsoft Windows ASF File Media Header Parsing Code Execution (MS09-047; CVE-2009-2498)

ASF Advanced Systems Format is a file format that stores audio and video information and is specially designed to run over networks like the Internet. It is a compressed format that contains streaming audio, video, slide shows, and synchronized events. ASF enables content to be delivered as a...

Internet Explorer Cross Domain Document Switching (MS09-019; CVE-2007-3091)

Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a script that can create a race condition that could break the same-origin policy of Internet Explorer and re...

Microsoft IIS WebDAV Extension URL Decoding Security Bypass (CVE-2009-1535)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allow clients to publish, lock, and manage resources on the Web. An elevation of privilege vulnerability has been reported in the Microsoft Windows WebDAV extension for IIS. The vulnerability is due to an error i...

Microsoft PowerPoint Converter ExObject Record Memory Corruption (MS09-017; CVE-2009-0223)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

Microsoft Word RTF Object Parsing Remote Code Execution (MS08-072; CVE-2008-4027)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory calculation error in Microsoft Word that fails to properly handle specially crafted control words in Rich Text Format .rtf files....

Microsoft Excel File OBJ Record Memory Corruption (MS08-074; CVE-2008-4264)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to an error in Microsoft Excel as a result of pointer corruption when loading Excel formulas. An attacker can exploit this flaw to execu...

Microsoft Color Management System Path Name Buffer Overflow (MS08-046; CVE-2008-2245)

Image Color Management ICM is a color management system that parses and uses data in International Color Consortium ICC profiles to perform color translation operations. A remote code execution vulnerability was reported in the Microsoft Color Management System. The vulnerability is due to a flaw...

Microsoft Project Invalid Memory Pointer Code Execution (MS08-018; CVE-2008-1088)

Microsoft Project is a project management software program designed to assist project managers to stay informed, keep project teams aligned, increase productivity and control project work, schedules, and finances.A remote code execution vulnerability has been identified in the way Microsoft Proje...

Preemptive Protection against Microsoft Excel Macro Validation Remote Code Execution Vulnerability (MS08-014)

A memory corruption vulnerability has been identified in Microsoft Excel. Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target...

IPS-1 Protection for Outlook NNTP Vulnerability (CVE-2007-3897/MS07-056)

Several versions of Microsoft Outlook have vulnerabilities in their handling of NNTP headers that could result in arbitrary code execution...

Preemptive Protection against Microsoft Agent Remote Code Execution Vulnerability (MS07-051)

A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier. A remote attacker can exploit this issue to execute arbitrary code on the affected...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Internet Explorer VML Buffer Overrun (MS07-004; CVE-2007-0024)

Microsoft Internet Explorer IE contains a remote code execution vulnerability. The vulnerability exists in Microsoft Vector Markup Language VML. VML is a set of XML tags used for exchange, editing, and delivery of vector graphics on the web. By convincing a user to visit a specially crafted Web...

ART Files (CVE-2006-2378)

...

How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk

Google Talk is an application used to call or send instant messages for Microsoft Windows operating systems. Instant messaging applications may risk an organization's security in the following ways:1. Vulnerabilities in IM applications could be exploited to compromise a user's system i.e MSN...

Multiple Products Malformed GIF Image File Handling Buffer Overflow (CVE-2005-0243; CVE-2005-0399; CVE-2007-1071)

...

Microsoft Windows DHCP Server Service Denial of Service (CVE-2004-0899; CVE-2004-0900)

...

C-DATA Command Injection (CVE-2022-29337)

A command injection vulnerability exists in C-DATA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Advantech iView Directory Traversal (CVE-2022-2139)

A directory traversal vulnerability exists in Advantech iView. The vulnerability is due to improper validation of user-supplied path before using in findCfgDeviceListDetailsExport method...

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-46: CVE-2022-42339)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows Mixed Reality Developer Tools Information Disclosure (CVE-2022-37974)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Exchange Server Remote Code Execution (CVE-2022-41082; CVE-2022-41040)

A remote code execution vulnerability exists in Microsoft Exchange. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-37957)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine OpManager SQL Injection (CVE-2019-17602)

An SQL injection vulnerability exists in Zoho ManageEngine OPManager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

D-Link DCS-930L Remote Code Execution (CVE-2016-11021)

A remote code execution vulnerability exists in D-Link DCS-930L. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

jQuery UI Datepicker Widget Cross Site Scripting (CVE-2021-41182; CVE-2021-41183)

A cross site scripting vulnerability exists in the jQuery UI Datepicker widget. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-22000)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Google Chrome Heap Corruption (CVE-2021-37975)

A heap corruption vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-21897)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-01: CVE-2021-44703)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-38633)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Kernel Elevation of Privilege (CVE-2021-33771)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Nagios XI Manage.php Directory Traversal (CVE-2021-3277)

A directory traversal vulnerability exists in Nagios XI. The vulnerability is due to insufficient validation of the request parameters in manage.php of the Custom-includes module...

Microsoft Windows dssenh.dll Elevation of Privilege (CVE-2021-31201)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2021-31188)

An elevation of privilege vulnerability exists in Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Food And Drink Menu Plugin Remote Code Execution (CVE-2020-29045)

A remote code execution vulnerability exists in WordPress Food And Drink Menu Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

D-Link DIR-878 Command Injection (CVE-2019-8315)

A command injection vulnerability exists in D-Link DIR-878 devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

LightCMS Remote Code execution (CVE-2021-27112)

A remote code execution vulnerability exists in LightCMS. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected system...

Netgear ProSAFE Cross-Site Scripting (CVE-2020-35228)

A cross site scripting vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Amino Communications Command Injection (CVE-2020-10209)

A command injection vulnerability exists in Amino Communications. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

74CMS Remote Code Execution (CVE-2020-35339)

A remote code execution vulnerability exists in 74CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB21-09: CVE-2021-21028)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...