13538 matches found
Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-0228)
A memory corruption vulnerability exists in Microsoft Browsers. The vulnerability is due to an error when handling objects in memory. A remote attacker can exploit this vulnerability and execute arbitrary code in the context of the current user...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-0238)
A heap buffer overflow vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
HPE LoadRunner and Performance Center libxdrutil.dll mxdr_string Heap Buffer Overflow (CVE-2017-5789)
A heap buffer overflow vulnerability exists in HP LoadRunner and Performance Center. The vulnerability is due to insufficient validation of the length of XDR encoded string. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable...
Adobe Acrobat and Reader Integer Overflow (APSB17-11: CVE-2017-3034)
An integer overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a parsing error in XML Forms Architecture XFA engine in Adobe Reader and Acrobat. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Microsoft Office Memory Corruption (CVE-2017-0194)
An Out-of-Bounds-Write vulnerability exists in Microsoft Office. The vulnerability is due to a failure of Office software to properly handle objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Microsoft Windows Kernel Elevation of Privilege (MS17-017: CVE-2017-0050)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows kernel API enforces permissions. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Microsoft Office Information Disclosure (MS17-014: CVE-2017-0027)
An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Microsoft Internet Explorer Elevation of Privilege (MS17-006: CVE-2017-0154)
An elevation of privilege vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Microsoft Office Memory Corruption (MS17-014: CVE-2017-0019)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0088)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...
Adobe Acrobat and Reader Memory Corruption (APSB17-01: CVE-2017-2965)
A memory corruption vulnerability exists in Adobe Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker could trigger this issue via a specially crafted TIFF file...
Network Time Protocol Windows Daemon getEndptFromIoCtx Denial of Service (CVE-2016-9312)
A denial of service vulnerability has been reported in the Windows port of Network Time Foundation's NTP Daemon. The vulnerability is due to insufficient error handling when receiving large UDP packets. A remote, unauthenticated attacker can exploit this vulnerability by sending a large UDP packe...
Microsoft LSASS Denial of Service (MS17-004: CVE-2017-0004)
A denial of service vulnerability exists in Windows. The vulnerability is due to the way the Local Security Authority Subsystem Service LSASS handles authentication requests. An attacker can successfully exploit this vulnerability which could cause a denial of service on the target system and cou...
Microsoft Windows Installer Elevation of Privilege (MS16-149: CVE-2016-7292)
An elevation of privilege vulnerability exists in the Windows Installer. The vulnerability is due to the Windows Installer failing to properly sanitize input leading to an insecure library loading behavior. A attacker could run arbitrary code with elevated system privileges...
Microsoft Windows Win32k Elevation of Privilege (MS16-151: CVE-2016-7259)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode fails to properly handle objects in memory. Successful exploitation would lead to write access violation...
Microsoft Office OLE DLL Side Loading (MS16-148: CVE-2016-7275)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused due to an incorrect link to a dynamic-link library file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file which will lead to arbitrary code execution...
FreePBX callmenum Remote Code Execution (CVE-2012-4869)
FreePBX is an open source software implementation of a telephone Private Branch eXchange PBX. A code execution vulnerability exists in FreePBX software. Remote attacker can exploit this vulnerability to inject arbitrary PHP functions and commands...
Microsoft Office Memory Corruption (MS16-133: CVE-2016-7228)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Microsoft Windows Graphics Component Remote Code Execution (MS16-120; CVE-2016-3393)
A remote code execution vulnerability has been reported in Microsoft Windows Graphics Component. The vulnerability is due to the improper handling of objects in the memory.A remote attackers could exploit this vulnerability by enticing users to view a specially crafted web page, or a document fil...
Microsoft Browser Information Disclosure (MS16-118: CVE-2016-3298)
An information disclosure vulnerability exists in Internet Explorer. The vulnerability is due to the way Internet Explorer improperly handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...
Nuuo NVR PHP System Function Unauthenticated Remote Code Execution (CVE-2016-5675)
A remote code execution was discovered in Nuuo Network Video Recording systems with Network Attached Storage. The vulnerability is due to fails in sanitising by the PHP system function. An unauthenticated attacker may use this vulnerability to execute code on the vulnerable server...
MySQL Remote Code Execution (CVE-2016-6662; CVE-2016-6663; CVE-2016-6664)
A code execution vulnerability exists in MySQL database server. Successful exploitation could allow a remote attacker to shut down the database, modify its content, or execute arbitrary code on the affected servers...
Microsoft Edge Memory Corruption (MS2016-08: CVE-2016-3294)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
Microsoft Office Memory Corruption (MS16-107: CVE-2016-3357)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Microsoft Office Memory Corruption (MS16-107: CVE-2016-3363)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Microsoft Internet Explorer Information Disclosure (MS16-095: CVE-2016-3321)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling URIs. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...
Microsoft Win32k Elevation of Privilege (MS16-090 : CVE-2016-3252)
An elevation of privilege vulnerability exists in Windows Kernel. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...
Microsoft Office Memory Corruption (MS16-088: CVE-2016-3282)
A memory corruption vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Apache Jetspeed Portal URI Path Cross-Site Scripting (CVE-2016-0712)
A cross-site scripting vulnerability exists in Apache Jetspeed 2. The vulnerability is due to insufficient validation of the URI path. A remote, unauthenticated attacker could exploit this vulnerability by enticing a victim user to visit a crafted web site. Successful exploitation allows the...
Microsoft Edge Memory Corruption (MS16-068: CVE-2016-3199)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
GnuTLS DistinguishedName Decoding Double Free - ver 2 (CVE-2015-6251)
A double-free vulnerability has been reported in GnuTLS. The vulnerability is due to an error within gnutlsx509dntostring while processing very long Distinguished Name values in X.509 certificates. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted certificate ...
Microsoft Edge Memory Corruption (MS16-052: CVE-2016-0191)
A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to a use of uninitialized pointer. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption in a way that would...
Microsoft Windows CSRSS Security Feature Bypass (MS16-048: CVE-2016-0151)
An elevation of privilege vulnerability exists in Microsoft Windows CSRSS. The vulnerability is due to an error in the way windows kernel verifies tokens. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
WordPress WPML Plugin SQL Injection (CVE-2015-2314)
An SQL injection vulnerability exists in the WPML plugin for WordPress, allowing remote attackers to execute arbitrary SQL commands...
Microsoft Silverlight Runtime Remote Code Execution (MS16-006: CVE-2016-0034)
A remote code execution vulnerability exists in Microsoft Silverlight. The vulnerability is due to incorrect handling of certain open and close requests that can result in read and write access violations. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a...
Microsoft Office Memory Corruption (MS15-116: CVE-2015-6094)
A use-after-free vulnerability exists in Microsoft Excel. A remote attacker could use this vulnerability by sending a specially crafted Excel spreadsheet. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system...
Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6082)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Xlink FTP Server Request Buffer Overflow (CVE-2006-5792)
A buffer overflow vulnerability exists in Xlink FTP server that comes bundled with Omni-NFS Enterprise 5.2. A remote attacker may send an overly long FTP request to the server which allows arbitrary code execution...
Oracle Endeca Information Discovery Integrator ETL Server RenameFile Directory Traversal (CVE-2015-2606)
A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the RenameFile operation. By sending crafted SOAP requests to the target system, a remote...
Bugzilla Mail Authentication Mechanism Bypass (CVE-2015-4499)
An authentication mechanism bypass vulnerability has been found in Bugzilla. Any unauthenticated remote attacker may leverage this vulnerability to gain access to database information regarding unpatched bugs, and exploit them to attack the affected pieces of software before security patches are...
Mitsubishi MX Component v3 ActiveX Buffer Overflow (CVE-2013-3075)
A code execution vulnerability has been reported in Mitsubishi's MX PLC component. The vulnerability is due to insufficient validation of input by several functions. A remote attacker can exploit this vulnerability by enticing a user to visit a maliciously crafted website. This can lead to code...
Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2397)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
IBM Tivoli Directory Server Integer Overrun Buffer Overflow - Ver2 (CVE-2011-1206)
A buffer overflow vulnerability has been reported in IBM Tivoli Directory Server. An attacker could exploit this vulnerability via a crafted LDAP request. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076) - Ver2 (CVE-2012-1885)
A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to a memory allocation error. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Excel file with an affected version of Microsoft Excel. Successful...
ScadaTEC ScadaPhone and ModbusTagServer SCADA Remote Code Execution - Ver2 (CVE-2011-4535)
A stack buffer overflow vulnerability has been reported in ScadaTEC ScadaPhone and ModbusTagServer. The vulnerability is due to a boundary check error. A remote attacker can exploit this issue by enticing a victim to open a specially crafted ZIP archive file with the affected product. Successful...
Novell CASA PAM Module Stack Buffer Overflow - Ver2 (CVE-2006-0736)
A buffer overflow vulnerability has been reported in Novell's CASA. The vulnerability is due to a boundary error in the CASA PAM handler 'pammicasa' authentication module. A remote attacker can exploit this vulnerability by gaining root access to any machine with CASA installed...
Nfsutils TCP Connection Termination Denial of Service attack - Ver2 (CVE-2004-1014)
A denial-of-service vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
SolarWinds Firewall Security Manager userlogin.jsp Policy Bypass (CVE-2015-2284)
A policy bypass vulnerability exists in SolarWinds Firewall Security Manager. The vulnerability is due to a design weakness in the userlogin.jsp page which sets the "username" session value to a user supplied value prior to authentication. A remote unauthenticated attacker could exploit this...
Schneider Electric Pelco DS-NVs Rvctl.RVControl Buffer Overflow (CVE-2015-0982)
A buffer overflow vulnerability exists in Schneider Electric Pelco DS-NV Software package. The vulnerability is due to insufficient input validation on a user-supplied input in the SetText method before it is copied into a fixed length buffer on stack. A remote unauthenticated attacker can exploi...
Apple Quicktime MJPEG Frame stsd Atom Heap Overflow - Ver2 (CVE-2013-1020)
A buffer overflow vulnerability has been reported in Apple Quicktime. The vulnerability is due to improper processing of mjpeg movies with an improper jpeg frame size in the stsd atom. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...