13538 matches found
Update Protection against AXIS Communications Camera Control image_pan_tilt Buffer Overflow
A buffer overflow vulnerability was reported in the ActiveX Camera Control by AXIS Communications. A remote image/video monitoring solution, AXIS Camera Control is an ActiveX control with multiple functions that can be used over HTTP. The vulnerability is due to a boundary error that can be...
Microsoft Word RTF Control Word Handling Integer Overflow (MS08-072; CVE-2008-4025)
Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...
Sun Solaris rpc.ypupdated Command Injection (CVE-1999-0208)
Sun Solaris provides its Network Information Service NIS services through the SUN-RPC remote procedure call mechanism. One of these services is called rpc.ypupdated which is responsible for duplicating information from master NIS server to slave servers. A command injection vulnerability exists i...
Security Best Practice: Familiarize Yourself with the Network Quota Protection
Network Quota enforces a limit upon the number of connections that are allowed from the same source IP, to protect against Denial Of Service attacks...
Update Protection against CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow Vulnerability
A buffer overflow vulnerability has been discovered in CA BrightStor ARCserve Backup. Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. CA BrightStor ARCserve Backup provides centralized control over a series of distributed...
Preemptive Protection against Novell Client nwspool.dll EnumPrinters Function Buffer Overflow Vulnerability
A buffer overflow vulnerability has been discovered in the Novel Client for Windows. The flaw is due to a boundary error in Novell Client's Spooler service nwspool.dll. The vulnerable service is included with the Novell Client for Microsoft Windows, and provides access to remote printing services...
Apple QuickTime PICT Image Parsing Malformed Records (CVE-2007-4672; CVE-2007-4676; CVE-2009-0010)
Apple QuickTime is a multimedia player that supports a wide range of media formats. A buffer overflow vulnerability has been reported in Apple QuickTime. A remote attacker can exploit this vulnerability via a specially crafted PICT file - an image file format that can be processed by the QuickTim...
Update Protection against Sun Directory Server LDAP Denial of Service
There exists a vulnerability in the Sun Directory Server. The flaw is caused due to improper handling of certain overly large LDAP messages. An unauthenticated remote attacker may exploit this vulnerability by sending a crafted LDAP message to the target host which may terminate the affected LDAP...
Update Protection against Microsoft Management Console (MMC) Remote Code Execution Vulnerability (MS06-044)
Microsoft Management Console MMC is prone to a cross-site scripting XSS vulnerability. MMC is an application that allows a user to perform administrative tasks, configure Windows services and more. A remote attacker can exploit this vulnerability to execute arbitrary commands on an affected syste...
Security Best Practice: Protect Yourself from DCOM vulnerabilities
The Distributed Component Object Model DCOM is a protocol that enables software components to communicate directly over a network. Previously called "Network OLE," DCOM is designed for use across multiple network transports, including Internet protocols such as HTTP.There are several known and...
Preemptive Protection against GlobalSCAPE Secure FTP Server Remote Denial of Service
GlobalSCAPE Secure FTP Server is an FTP server application for Microsoft Windows. The application is susceptible to a remote denial of service vulnerability. The issue is triggered when an unspecified custom command with a lengthy parameter line is passed to the server, causing the server to cras...
Zoho ManageEngine ServiceDesk Cross-Site Scripting (CVE-2021-46065)
A cross-site scripting vulnerability exists in Zoho ManageEngine ServiceDesk. The vulnerability is due to improper sanitization of secondary email field parameter...
Nagios IM Command Injection (CVE-2019-9202)
A command injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
IBM Spectrum Protect Plus uploadHttpsCertificate Command Injection (CVE-2020-4241)
A command injection vulnerability exists in IBM Spectrum Protect Plus. The vulnerability is due to a lack of input validation in the Administrative Console service when parsing the filename parameter in the uploadHttpsCertificate method. A remote authenticated attacker could exploit this...
Hitron CHITA Command Injection (CVE-2022-25017)
A command injection vulnerability exists in Hitron CHITA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pulse Connect Secure HTTP Request Smuggling (CVE-2022-21826)
An HTTP Request Smuggling vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Victor CMS Remote Code Execution (CVE-2022-27478)
A remote code execution vulnerability exists in Victor CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Graphics Device Interface Buffer Overflow (CVE-2019-1439)
A heap-based buffer overflow vulnerability exists in the MF3216 component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit the vulnerability by enticing a user to open a specially crafted file and take actions...
Microsoft Windows ALPC Elevation of Privilege (CVE-2022-34725)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35665)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
FlatCore CMS Server-Side Request Forgery (CVE-2021-41403)
A server-side request forgery vulnerability exists in FlatCore CMS. Successful exploitation of this vulnerability could allow an attacker to access internal resources...
Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34222)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Adobe Acrobat and Reader Use After Free (APSB22-32: CVE-2022-34232)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Advanced Local Procedure Call Elevation of Privilege (CVE-2022-30160)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
D-Link Routers Remote Code Execution (CVE-2019-16920)
A remote code execution vulnerability exists in D-Link routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Zabbix Web Frontend Authentication Bypass (CVE-2022-23134)
An authentication bypass vulnerability exists in Zabbix Web Frontend. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Microsoft Windows DWM Core Library Elevation of Privilege (CVE-2022-21994)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Out-of-bounds Read (APSB22-01: CVE-2021-44715)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Adobe Acrobat and Reader Out-of-bounds Write (APSB22-01: CVE-2021-45068)
An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
GitLab CE Remote Code Execution (CVE-2021-22205)
A remote code execution vulnerability exists in GitLab CE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PHPMyWind Remote Code Execution (CVE-2021-39503)
A remote code execution vulnerability exists in PHPMyWind. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2021-38639)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Stop Spammers Plugin Cross Site Scripting (CVE-2021-24245)
A cross site scripting vulnerability exists in WordPress Stop Spammers plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Apple Quicktime Remote Code Execution (CVE-2015-3788)
A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Nagios XI Dashboard Tools Cross-Site Scripting (CVE-2020-27989)
A stored cross-site scripting vulnerability exists in Nagios XI. The vulnerability is due to insufficient validation of user inputs when processing requests for Deploy Dashboards feature...
Microsoft Win32k Elevation of Privilege (CVE-2021-26863)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apple Quicktime Remote Code Execution (CVE-2015-7088)
A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Information Disclosure (CVE-2019-1158)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Windows Server Privilege Escalation (CVE-2016-0095)
A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
OpenMRS Cross-Site Scripting (CVE-2020-5730)
A cross-site scripting vulnerability exists in OpenMRS. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...
Citrix SD-WAN Center Remote Code Execution (CVE-2020-8271)
A remote code execution vulnerability exists in Citrix SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle Fusion Middleware Cross-Site Scripting (CVE-2010-3581)
A vulnerability exists in Oracle Fusion Middleware. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Media Foundation Use After Free (CVE-2019-1430)
A use-after-free vulnerability exists in Microsoft Media Foundation. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2020-1566)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Perl archive zip Directory Traversal (CVE-2018-10860)
A directory traversal vulnerability exists in Perl archive zip. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2020-1251)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft VBScript Remote Code Execution (CVE-2020-1213)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12206)
A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12207)
A heap-based buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Win32k Elevation of Privilege (CVE-2020-1143)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...