13538 matches found
GnuTLS DistinguishedName Decoding Double Free - ver 2 (CVE-2015-6251)
A double-free vulnerability has been reported in GnuTLS. The vulnerability is due to an error within gnutlsx509dntostring while processing very long Distinguished Name values in X.509 certificates. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted certificate ...
Microsoft Office Memory Corruption (MS16-042: CVE-2016-0127)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Microsoft Office Memory Corruption (MS16-042: CVE-2016-0139; CVE-2016-0140)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Microsoft Office Memory Corruption (MS16-042: CVE-2016-0122)
A remote code execution vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted fi...
Microsoft Windows RPC Authentication Downgrade (MS16-047: CVE-2016-0128; CVE-2016-2118)
A security bypass vulnerability, also referred to as BadLock, exists in Microsoft Windows clients connecting to Samba Servers. The vulnerability is due to an authentication design weakness...
IBM Tivoli Storage Manager FastBack Server Opcode 4115 Buffer Overflow (CVE-2015-4931)
A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking on parameters in opcode 4115 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...
WordPress WPML Plugin SQL Injection (CVE-2015-2314)
An SQL injection vulnerability exists in the WPML plugin for WordPress, allowing remote attackers to execute arbitrary SQL commands...
Microsoft Scripting Engine Memory Corruption (MS16-002: CVE-2016-0024)
An integer overflow vulnerability exists in Microsoft Edge. The vulnerability is due to lack of input validation within a DataView object. Successful exploitation of this issue can lead to remote code execution...
Microsoft Windows Graphics Memory Remote Code Execution (MS15-115: CVE-2015-6104)
A remote code execution vulnerability has been reported in Windows Graphics Component. The vulnerability is due to the way Windows components handle specially crafted TTF files. A remote attacker can exploit this issue by enticing a user to open a maliciously crafted TTF file...
OpenEMR globals.php Authentication Bypass (CVE-2015-4453)
An authentication weakness vulnerability exists in OpenEMR, specifically in the globals.php script. The vulnerability is due to variable name collision during HTTP parameter extraction. Successful exploitation will bypass authentication and allow the attacker to gain unauthorized access to the...
Oracle Endeca Information Discovery Integrator ETL Server RenameFile Directory Traversal (CVE-2015-2606)
A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the RenameFile operation. By sending crafted SOAP requests to the target system, a remote...
Bugzilla Mail Authentication Mechanism Bypass (CVE-2015-4499)
An authentication mechanism bypass vulnerability has been found in Bugzilla. Any unauthenticated remote attacker may leverage this vulnerability to gain access to database information regarding unpatched bugs, and exploit them to attack the affected pieces of software before security patches are...
Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2485)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer handle element identifiers since it fails to detect a specific failure case which can be abused to corrupt arbitrary memory. A remote attacker can exploit...
Wavelink Emulation License Server HTTP Header Processing Buffer Overflow (CVE-2015-4059)
A buffer overflow vulnerability exists in Wavelink Emulation License Server. The vulnerability is due to a boundary error when parsing HTTP headers. By sending crafted requests to a vulnerable server, a remote unauthenticated attacker can possibly exploit this vulnerability to execute arbitrary...
Microsoft Windows OpenType Font Parsing Remote Code Execution (MS15-080: CVE-2015-2459)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the OpenType Font OTF driver handles objects in memory. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .otf file or web pag...
Microsoft Office Integer Underflow (MS15-081: CVE-2015-2470)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused when the Office software improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted office...
Microsoft SQL Server Remote Code Execution (MS15-058; CVE-2015-1762)
A remote code execution vulnerability exists in Microsoft SQL Server. The vulnerability is caused when Microsoft SQL Server incorrectly handles internal function calls to uninitialized memory. An attacker could exploit the vulnerability if a privileged user runs a specially crafted query on an...
Nfsutils TCP Connection Termination Denial of Service attack - Ver2 (CVE-2004-1014)
A denial-of-service vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Windows NT 4.0 DHCP Server Request Buffer Overflow attack - Ver2 (CVE-2004-0900)
A buffer overflow vulnerability has been reported in Microsoft Windows NT. An attacker could exploit this vulnerability via a malformed DHCP message. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application...
Microsoft Internet Explorer HTTP Response Double Free Memory Corruption (MS08-045) - Ver2 (CVE-2008-2256)
Microsoft Internet Explorer is the most widely used Internet browser. . A remote code execution vulnerability was reported in the way Microsoft Internet Explorer accesses an object that has not been correctly initialized or that has been deleted. By convincing a user to visit a specially crafted...
IBM Informix Client NFX Buffer Overflow - Ver2 (CVE-2009-3691)
A buffer overflow vulnerability has been reported in IBM Informix Client Software Development Kit and Ibm Informix Connect Runtime. An attacker could exploit this vulnerability via a .nfx file with a crafted HostSize, and possibly ProtoSize and ServerSize, field that triggers a stack-based buffer...
ScadaTEC ScadaPhone and ModbusTagServer SCADA Remote Code Execution - Ver2 (CVE-2011-4535)
A stack buffer overflow vulnerability has been reported in ScadaTEC ScadaPhone and ModbusTagServer. The vulnerability is due to a boundary check error. A remote attacker can exploit this issue by enticing a victim to open a specially crafted ZIP archive file with the affected product. Successful...
Microsoft Internet Explorer Deleted Object Code Execution (MS13-037) - Ver2 (CVE-2013-1312)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
CoolPDF Reader Image Stream Processing Buffer Overflow - Ver2 (CVE-2012-4914)
A buffer overflow vulnerability has been reported in CoolPDF Reader. The vulnerability is due to insufficient validation of streams while processing PDF files. An attacker could exploit this vulnerability by enticing an unsuspecting user to download and process a specially crafted PDF file, which...
Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1668)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Oracle 9i HTTP Server Soap Router Access - Ver2 (CVE-2001-1371)
A SOAP vulnerability has been reported in Oracle Application Server 9iAS 1.0.2.2. The vulnerability allows anonymous users to deploy applications by default. A remote attacker could trigger this flaw by default via urn:soap-service-manager and urn:soap-provider-manager...
Microsoft Excel Sheet Object Type Confusion (MS10-017) - Ver2 (CVE-2010-0258)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...
WordPress WooCommerce Plugin Cross-Site Scripting (CVE-2015-2069)
A cross-site scripting vulnerability has been reported in WordPress WooCommerce plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
OpenSSL TLS Export Cipher Suite Downgrade (CVE-2015-0204; CVE-2015-1637)
A vulnerability has been detected in the way OpenSSL handles TLS handshakes that use weak, legacy cipher suites. An attacker might leverage this vulnerability to intercept secure communications...
Corel Multiple Products Multiple Insecure Library Loading (CVE-2014-8393)
Multiple insecure library loading vulnerabilities have been reported in multiple Corel products. The vulnerabilities are due to the insecure loading of a number of libraries. These include but are not limited to, Wintab32.dll, TDMgd3.089.dll, wacommt.dll, and quserex.dll. A remote attacker could...
WordPress FancyBox Plugin Code Injection (CVE-2015-1494)
A code injection vulnerability has been reported in WordPress FancyBox Plugin. A remote attacker could inject arbitrary code into the FancyBox Plugin code via crafted parameters...
Novell eDirectory IMONITOR Cross-Site Scripting (CVE-2014-5212)
A cross-site scripting vulnerability exists in Novell eDirectory IMONITOR. The vulnerability is due to an input validation error while parsing the rdn parameter. A remote attacker could exploit this vulnerability to execute arbitrary script or HTML code in the user's browser session...
Advantech WebAccess HMI and SCADA Software CrossSite Scripting - Ver2 (CVE-2012-0233)
A cross-site scripting vulnerability has been reported in Advantech Webaccess. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Microsoft Office Art Drawing Records Code Execution (MS10-087) - Ver2 (CVE-2010-3334)
Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A remote attacker could exploit this issue via a malformed Office file. Successful exploitation of this vulnerability may allow execution of...
InduSoft Web Studio Unauthenticated Insecure Remote Operations Code Execution - Ver2 (CVE-2011-4051)
A code execution vulnerability has been reported in the Remote Agent component of InduSoft Web Studio. The vulnerability is due to the absence of authentication for incoming requests to the Remote Agent service. An attacker could exploit this vulnerability by sending crafted requests to the...
Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow - Ver2 (CVE-2008-0660)
Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...
Digium Asterisk Manager User Shell Command Execution - Ver2 (CVE-2012-2414)
A security bypass vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in the way the server validates permissions while executing shell commands from unauthorized users. A remote attacker can exploit this issue by sending specially crafted AMI requests to the...
Microsoft Excel RealTimeData Record Heap Corruption (MS10-038) - Ver2 (CVE-2010-1247)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
Microsoft Internet Explorer Memory Corruption (MS14-080: CVE-2014-6374)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
RomPager Authorization Buffer Overflow Denial of Service (CVE-2014-9223)
A buffer overflow vulnerability exist in RomPager Web Server. A remote attacker could exploit this vulnerability by sending a crafted request to the vulnerable server causing a denial of service...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6343; CVE-2015-1662)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Joomla Component Jw_allVideos Remote File Download (CVE-2010-0696)
A directory traversal vulnerability has been reported in Joomlaworks Jw Allvideos. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Apache HTTP Server mod_deflate Denial of Service (CVE-2014-0118)
A denial of service vulnerability exists in Apache HTTP server. The vulnerability exists in the moddeflate module and is due to a resource exhaustion that is related to request body decompression configuration. A remote, unauthenticated attacker can leverage this vulnerability by sending a...
Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4092)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-051: CVE-2014-4057)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
A directory traversal vulnerability has been reported in the ExtensionAccessServlet included in McAfee Cloud Single Sign On. The vulnerability is due to insufficient input sanitization on the GET request URI passed to the ExtensionAccessServlet. A remote unauthenticated attacker can exploit this...
D-Link HNAP Request Stack Buffer Overflow (CVE-2014-3936)
A remote code execution vulnerability exists in D-Link routers. The vulnerability is due to a stack buffer overflow while processing crafted HTTP POST requests addressed to the HNAP handler. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary code on the affected...
Symantec Web Gateway Multiple PHP Pages Cross Site Scripting (CVE-2014-1652)
A cross-site scripting vulnerability exists in Symantec Web Gateway. Successful exploitation could result in attacker-controlled script code being executed in the browser context of the Symantec Web Gateway management console. The vulnerability is due to improper validation of "variable",...
Adobe ColdFusion Server invoke() Method Code Execution (CVE-2013-3350)
A remote code execution has been reported in Adobe ColdFusion server. The vulnerability is due to a bug in the invoke method. A remote attacker can exploit this issue by changing values on a page hosted on the affected server...
Microsoft Word Access Violation Code Execution - Ver2 (CVE-2011-1983)
A code execution vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in the way Microsoft Word handles objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...