13538 matches found
Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4092)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Windows Kodak Image Viewer Code Execution (MS07-055) - ver 2 (CVE-2007-2217)
A buffer overflow vulnerability has been reported in Microsoft Windows Kodak Image Viewer. The vulnerability is due to improper parsing of specially crafted image files, such as TIFF files. An attacker can exploit this vulnerability by constructing a specially crafted image and enticing a victim ...
Microsoft Internet Explorer Memory Corruption (MS14-051: CVE-2014-4057)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
A directory traversal vulnerability has been reported in the ExtensionAccessServlet included in McAfee Cloud Single Sign On. The vulnerability is due to insufficient input sanitization on the GET request URI passed to the ExtensionAccessServlet. A remote unauthenticated attacker can exploit this...
D-Link HNAP Request Stack Buffer Overflow (CVE-2014-3936)
A remote code execution vulnerability exists in D-Link routers. The vulnerability is due to a stack buffer overflow while processing crafted HTTP POST requests addressed to the HNAP handler. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary code on the affected...
Adobe ColdFusion Server invoke() Method Code Execution (CVE-2013-3350)
A remote code execution has been reported in Adobe ColdFusion server. The vulnerability is due to a bug in the invoke method. A remote attacker can exploit this issue by changing values on a page hosted on the affected server...
Microsoft Word Access Violation Code Execution - Ver2 (CVE-2011-1983)
A code execution vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in the way Microsoft Word handles objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Record Parsing Code Execution - Ver2 (CVE-2011-3403)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to improper handling of certain records in Microsoft Excel while parsing malformed Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
Microsoft Office Excel Label Record Buffer Overflow (MS11-021) - Ver2 (CVE-2011-0098)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a flaw in the parsing of Label record in Excel documents, causing a buffer overflow. Remote attackers can exploit this vulnerability by enticing target users to open a malicious Excel file. In ...
Internet Explorer ActiveX Navigate Handling Code Execution (MS08-073) - Ver2 (CVE-2008-4258)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that fails to properly validate parameters made during a method call in the...
Microsoft Word RTF Drawing Primitives Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4028)
Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...
GomPlayer wav Buffer Overflow - Ver2 (CVE-2013-5716)
A buffer overflow vulnerability has been reported in Gomlab Gom Player. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
GDI PNG Heap Overflow - Ver2 (CVE-2009-2501)
A buffer overflow vulnerability has been reported in GDI+. An attacker could exploit this vulnerability via a crafted PNG image file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Wim Fleischhauer Docpile INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4076)
A code execution vulnerability has been reported in Wim Fleischhauer Docpile. An attacker could exploit this vulnerability via a URL in the INITPATH parameter to lib/access.inc.php, lib/folders.inc.php, lib/init.inc.php or lib/templates.inc.php. Successful exploitation of this vulnerability could...
Adobe Multiple Products PDF JavaScript Method Buffer Overflow - Ver2 (CVE-2007-5659)
A buffer overflow vulnerability has been reported in multiple Adobe products. The vulnerability is due to insufficient input validation in certain JavaScript methods. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or...
VLC Media Player RTSP Plugin Stack Buffer Overflow (CVE-2013-6933)
A stack buffer overflow exists in VideoLAN VLC Media Player. The vulnerability is due an error in VLC's embedded Live555 RTSP library, when handling RTSP requests. Incorrect handling of RTSP commands can result in a stack buffer overflow. A remote unauthenticated attacker could exploit this...
Cisco IOS HTTP Authentication Bypass - Ver2 (CVE-2001-0537)
An authentication bypass vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Internet Explorer Mouse Drag Hijack Arbitrary File Execution - Ver2 (CVE-2004-0841)
An arbitrary file execution vulnerability has been reported in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute and install arbitrary programs on the affected system...
PHP POST File Upload Buffer Overflow - Ver2 (CVE-2002-0081)
A buffer overflow vulnerability has been reported in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
AINS function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0570)
A code execution vulnerability has been reported in Johannes Gijsbers Ad Fundum Integratable News Script AINS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MySQL Commander dbopen.php home Parameter PHP Code Execution - Ver2 (CVE-2007-1439)
A code execution vulnerability has been reported in bitesser MySQL Commander. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Access Memory Corruption (MS13-074; CVE-2013-3155)
A remote code execution vulnerability exists in Microsoft Access...
Microsoft Access ACCDB File Memory Corruption (MS13-074; CVE-2013-3157)
A memory corruption vulnerability has been reported in Microsoft Access...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5052)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Code Execution (CVE-2013-1559)
A remote code execution vulnerability exists in Oracle WebCenter Content...
NTR ActiveX Control Check() Method buffer overflow (CVE-2012-0266)
A remote code execution vulnerability has been reported in the NTR ActiveX 1.1.8...
Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3115)
A use after free vulnerability has been reported in Microsoft Internet Explorer...
Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3163)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
HP Intelligent Management Center IctDownloadServlet Information Disclosure (CVE-2012-5204)
An information disclosure vulnerability exists in HP Intelligent Management Center...
Novell GroupWise Client ActiveX gwmim1.ocx Untrusted Pointer Dereference (CVE-2013-0804)
An untrusted pointer dereference vulnerability has been reported in the ActiveX control for Novell GroupWise Client for Windows...
Internet Explorer Cache Control Heap Corruption (MS13-047; CVE-2013-3125)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer...
HP LeftHand Virtual SAN Appliance hydra Credential Information Disclosure (CVE-2012-3282)
An information disclosure vulnerability exists in HP LeftHand Virtual SAN Appliance. Successful exploitation will disclose credentials that could allow the attacker to log in to the server with administrator privileges. The vulnerability is due to a design weakness and occurs when a snapshot...
Symantec Gateway Products DNS Cache Poisoning - High Confidence (CVE-2005-0817)
The Symantec Firewall has a DNS proxy service, DNSD.exe, that acts as a proxy and cache server for the DNS requests generated by internal systems...
Internet Explorer CHTML Use After Free (MS13-009; CVE-2013-0029)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft OData WCF Replace Denial of Service (MS13-007; CVE-2013-0005)
A denial of service vulnerability has been reported in the OData specification...
7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050)
A buffer overflow vulnerability has been reported in SCADA IGSS Data Server IGSSdataServer.exe...
Microsoft Visio DXF File Parsing Code Execution (MS12-059; CVE-2012-1888)
A remote code execution vulnerability has been report in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing specially crafted DXF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Visio fi...
RealNetworks Helix Server rn5auth Credential Parsing Buffer Overflow (CVE-2012-0942)
A buffer overflow vulnerability has been reported in RealNetworks Helix Server...
Oracle Java Runtime True Type Font IDEF Opcode Heap Buffer Overflow (CVE-2012-0499)
A heap buffer overflow vulnerability has been reported in the Java Runtime Environment JRE component...
IBM Tivoli Provisioning Manager Express User.updateUserValue SQL Injection (CVE-2012-0199)
An SQL injection vulnerability has been reported in IBM Tivoli Provisioning Manager Express...
Microsoft Excel File Format Code Execution (MS12-030; CVE-2012-0141)
A remote code execution vulnerability has been reported in Microsoft Excel...
Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow (CVE-2007-5107)
A remote code execution vulnerability has been reported in Ask.com toolbar. The vulnerability is due to a boundary error in an ActiveX control. A remote attacker could exploit this issue by sending an overly long string to a certain method in askbar.dll. Successful exploitation could allow...
Citrix Access Gateway Plug-in ActiveX Code Execution (CVE-2011-2882)
Citrix Access Gateway is an enhanced SSL VPN system which not only provides VPN access, but also enables application level access control. The system is available as standalone software, a physical appliance or a virtual machine. It is designed to work with Citrix XenApp and XenDesktop to allow...
Microsoft PowerPoint Insecure Library Loading (MS11-094; CVE-2011-3396)
A remote code execution vulnerability has been reported in Microsoft PowerPoint. The vulnerability is due to an error in the way Microsoft PowerPoint restricts the path used for loading external libraries. A remote attacker could exploit this vulnerability by enticing a user to open a legitimate...
ISC BIND CNAME RRSIG Request Denial of Service (CVE-2011-2465)
A denial of service vulnerability has been reported in ISC BIND. The vulnerability is due to an error while handling RRSIG requests. A remote attacker may exploit this vulnerability by sending a crafted RRSIG request to an affected server. Successful attack may cause the service to terminate...
Microsoft Windows Negotiate SSP Code Execution (CVE-2004-0119)
A remote code execution vulnerability has been reported in Microsoft Windows Negotiate Security Software Provider SSP interface. The vulnerability is due to a buffer overflow while handling certain network messages. A remote attacker may exploit this vulnerability by sending a specially crafted...
Oracle Secure Backup Administration Server validate_login Command Injection (CVE-2011-2261)
A command injection vulnerability has been reported in Oracle secure backup administration server. The vulnerability is due to insufficient user data filtering. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to a target user. Successful exploitation...
Microsoft Share Point Query/View Cross-Site Scripting (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
Microsoft Windows CSRSS ConsoleNumberOfCommand Code Execution (MS11-056; CVE-2011-1283)
An elevation of privilege vulnerability has been reported in Windows CSRSS. Remote attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation may enable an attacker to install programs; view, change, or delete data; or create new accounts with full user...
Xerver HTTP CRLF Injection Response Splitting (CVE-2009-4086)
This is a CRLF injection vulnerability in Xerver HTTP Server. Remote attackers could use this vulnerability to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL...