Joomla Component com_liveticker SQL Injection (CVE-2008-6148)

An SQL injection vulnerability has been reported in Raven-worx Liveticker. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1775)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Symantec Web Gateway Multiple PHP Pages Cross Site Scripting (CVE-2014-1652)

A cross-site scripting vulnerability exists in Symantec Web Gateway. Successful exploitation could result in attacker-controlled script code being executed in the browser context of the Symantec Web Gateway management console. The vulnerability is due to improper validation of "variable",...

CA ERwin Web Portal ConfigServiceProvider Remote File Creation (CVE-2014-2210)

A remote file creation/overwrite vulnerability exists in CA ERwin Web Portal. This vulnerability is due to lack of authentication and insufficient input validation in the ConfigServiceProvider servlet when processing HTTP requests. By sending crafted HTTP requests to the target system, a remote...

Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1766)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Novell iPrint Client ActiveX GetPrinterURLList2 Memory Corruption - Ver2 (CVE-2011-4185)

A memory corruption vulnerability has been reported in Novell iPrint Client ActiveX control. The vulnerability is due to improper validation of user-supplied string parameters. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

Microsoft Word Access Violation Code Execution - Ver2 (CVE-2011-1983)

A code execution vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in the way Microsoft Word handles objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Excel Record Parsing Code Execution - Ver2 (CVE-2011-3403)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to improper handling of certain records in Microsoft Excel while parsing malformed Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

Microsoft Word RTF Drawing Primitives Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4028)

Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...

Apple Webkit HTML Parsing Rowspan Denial of Service - Ver2 (CVE-2007-0342)

A denial-of-service vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Cisco IOS HTTP Authentication Bypass - Ver2 (CVE-2001-0537)

An authentication bypass vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

PHP POST File Upload Buffer Overflow - Ver2 (CVE-2002-0081)

A buffer overflow vulnerability has been reported in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle 9i HTTP Server Web Administration Access Privilege Escalation - Ver2 (CVE-2002-0561)

A privilege escalation vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft IIS ASP Handling Code Execution (MS08-006) - Ver2 (CVE-2008-0075)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of dynamic content, notably in the form...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Code Execution (CVE-2013-1559)

A remote code execution vulnerability exists in Oracle WebCenter Content...

NTR ActiveX Control StopModule() Remote Code Execution (CVE-2012-0267)

A remote code execution vulnerability has been reported in the NTR ActiveX 1.1.8...

NTR ActiveX Control Check() Method buffer overflow (CVE-2012-0266)

A remote code execution vulnerability has been reported in the NTR ActiveX 1.1.8...

Novell GroupWise Client ActiveX gwmim1.ocx Untrusted Pointer Dereference (CVE-2013-0804)

An untrusted pointer dereference vulnerability has been reported in the ActiveX control for Novell GroupWise Client for Windows...

3S Smart Software Solutions CoDeSys Gateway Server Denial Of Service (CVE-2012-4707)

A denial of service vulnerability has been reported in 3S Smart Software Solutions CoDeSys Gateway Server...

3S Smart Software Solutions CoDeSys Gateway Server Memory Access Error (CVE-2012-4704)

A memory access error vulnerability has been reported in Smart Software CoDeSys Gateway Server...

Internet Explorer Cache Control Heap Corruption (MS13-047; CVE-2013-3125)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

HP LeftHand Virtual SAN Appliance hydra Credential Information Disclosure (CVE-2012-3282)

An information disclosure vulnerability exists in HP LeftHand Virtual SAN Appliance. Successful exploitation will disclose credentials that could allow the attacker to log in to the server with administrator privileges. The vulnerability is due to a design weakness and occurs when a snapshot...

Symantec Gateway Products DNS Cache Poisoning - High Confidence (CVE-2005-0817)

The Symantec Firewall has a DNS proxy service, DNSD.exe, that acts as a proxy and cache server for the DNS requests generated by internal systems...

Apple iTunes m3u Playlist Multiple Buffer Overflows - High Confidence (CVE-2012-0677)

Multiple buffer overflow vulnerabilities have been reported in Apple iTunes. The vulnerabilities are due to a bounds checking error in iTunes while handling specially crafted .m3u files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .m3u file with ...

Internet Explorer CHTML Use After Free (MS13-009; CVE-2013-0029)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050)

A buffer overflow vulnerability has been reported in SCADA IGSS Data Server IGSSdataServer.exe...

Microsoft Excel Modified Data Structure Stack Overflow (MS12-076; CVE-2012-2543)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Visio DXF File Parsing Code Execution (MS12-059; CVE-2012-1888)

A remote code execution vulnerability has been report in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing specially crafted DXF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Visio fi...

VideoLAN VLC Media Player MMS Plugin Stack Buffer Overflow (CVE-2012-1775)

A stack buffer overflow vulnerability has been reported in VLC Media Player...

RealNetworks Helix Server rn5auth Credential Parsing Buffer Overflow (CVE-2012-0942)

A buffer overflow vulnerability has been reported in RealNetworks Helix Server...

Oracle Java Runtime True Type Font IDEF Opcode Heap Buffer Overflow (CVE-2012-0499)

A heap buffer overflow vulnerability has been reported in the Java Runtime Environment JRE component...

IBM Tivoli Provisioning Manager Express User.updateUserValue SQL Injection (CVE-2012-0199)

An SQL injection vulnerability has been reported in IBM Tivoli Provisioning Manager Express...

Microsoft Excel File Format Code Execution (MS12-030; CVE-2012-0141)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Windows msvcrt.dll Media File Code Execution (MS12-013; CVE-2012-0150)

A remote code execution vulnerability has been reported in Microsoft Windows...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow (CVE-2007-5107)

A remote code execution vulnerability has been reported in Ask.com toolbar. The vulnerability is due to a boundary error in an ActiveX control. A remote attacker could exploit this issue by sending an overly long string to a certain method in askbar.dll. Successful exploitation could allow...

Citrix Access Gateway Plug-in ActiveX Code Execution (CVE-2011-2882)

Citrix Access Gateway is an enhanced SSL VPN system which not only provides VPN access, but also enables application level access control. The system is available as standalone software, a physical appliance or a virtual machine. It is designed to work with Citrix XenApp and XenDesktop to allow...

Microsoft PowerPoint Insecure Library Loading (MS11-094; CVE-2011-3396)

A remote code execution vulnerability has been reported in Microsoft PowerPoint. The vulnerability is due to an error in the way Microsoft PowerPoint restricts the path used for loading external libraries. A remote attacker could exploit this vulnerability by enticing a user to open a legitimate...

ISC BIND CNAME RRSIG Request Denial of Service (CVE-2011-2465)

A denial of service vulnerability has been reported in ISC BIND. The vulnerability is due to an error while handling RRSIG requests. A remote attacker may exploit this vulnerability by sending a crafted RRSIG request to an affected server. Successful attack may cause the service to terminate...

Oracle Secure Backup Administration Server validate_login Command Injection (CVE-2011-2261)

A command injection vulnerability has been reported in Oracle secure backup administration server. The vulnerability is due to insufficient user data filtering. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to a target user. Successful exploitation...

Microsoft Data Access Components (MDAC) Insecure Library Loading (MS11-059; CVE-2011-1975)

This is a remote code execution vulnerability. The vulnerability is due to the improper way in which the MDAC handles the loading of library files DLL. A remote attacker could trigger this vulnerability by enticing a victim to accept and open an excel related file on a remote folder SMB or Webdav...

Microsoft Windows CSRSS ConsoleNumberOfCommand Code Execution (MS11-056; CVE-2011-1283)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Remote attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation may enable an attacker to install programs; view, change, or delete data; or create new accounts with full user...

Oracle Java XGetSamplePtrFromSnd Memory Corruption (CVE-2010-4462)

A memory corruption vulnerability has been reported in Oracle JRE and JDK. The vulnerability is due to an input validation error within the XGetSamplePtrFromSnd function while processing user supplied Soundbank streams. The vulnerability is triggered when Java processes malicious Soundbank stream...

Adobe Audition Session File Stack Buffer Overflow (APSB11-10; CVE-2011-0614)

Adobe Audition formerly Cool Edit Pro is a digital audio workstation from Adobe Systems featuring both a multi-track, non-destructive mix/edit environment and a destructive-approach waveform editing view. A stack buffer overflow exists in Adobe Audition. The vulnerability is due to an error when...

Internet Explorer Handling Layout Memory Corruption (MS11-050; CVE-2011-1254)

A remote code execution vulnerability has been reported in the way that Microsoft IE accesses an object that has not been correctly initialized or has been deleted. Microsoft IE attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way tha...

Multiple Products STARTTLS Plaintext Command Injection (CVE-2011-0411; CVE-2014-3556)

STARTTLS is an extension to plaintext communication protocols that offers a way to upgrade plain text communications to an encrypted TLS or SSL connection. Protocols such as SMTP and FTP can be TLS-secured with a compatible server by a client sending the STARTTLS command. A command injection...

Microsoft Windows Media Player PNG Chunk Handling Stack Overflow (MS06-024) - High Confidence (CVE-2006-0025)

An attacker can exploit this vulnerability by enticing a user to open a crafted PNG file, resulting in the possible injection and execution of arbitrary code on the target system with the privileges of the currently logged-in user. A remote stack buffer overflow vulnerability has been discovered ...

Preemptive Protection against Adobe Shockwave Player Director File FFFFFF88 Record Parsing Remote Code Execution Vulnerabilities (APSB11-01)

A code execution vulnerability exists in Adobe Shockwave player. The vulnerability is due to an integer overflow error while calculating the size value for heap memory allocation while parsing a FFFFFF88 record. Remote attackers can exploit this vulnerability by enticing target users to open a...

Microsoft PowerPoint Techno-color Time Bandit Code Execution (MS11-022; CVE-2011-0655)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. The vulnerability is caus...

Microsoft Windows Kernel win32k.sys SysCommand Code Execution (MS11-034; CVE-2011-1239)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been reported in the Windows kernel. The...

Microsoft Office Excel SupBook Record Linked List Corruption (MS11-021; CVE-2011-0979)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly manage the members of a data structure while parsing a specially crafted Excel...