13538 matches found
RDesktop process_redirect_pdu BSS Overflow Buffer Overflow - Ver2 (CVE-2008-1802)
A buffer overflow vulnerability has been reported in Rdesktop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Graphics Component Information Disclosure (MS14-085; CVE-2014-6355)
An information disclosure vulnerability has been reported in the Microsoft Graphics Component. The vulnerability is due to the way Microsoft Graphics Component improperly handles the decoding of JPEG images in memory. A remote attacker can exploit this vulnerability by enticing a user to download...
RomPager Authorization Buffer Overflow Denial of Service (CVE-2014-9223)
A buffer overflow vulnerability exist in RomPager Web Server. A remote attacker could exploit this vulnerability by sending a crafted request to the vulnerable server causing a denial of service...
Microsoft Windows SChannel Denial Of Service (MS14-066; CVE-2014-6321)
A denial of service vulnerability exists in Microsoft SChannel. The vulnerability is due to improper processing of specially crafted packets that leads to a denial of service. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted packets to the target...
Belkin N750 Router Unauthenticated Remote Command Execution (CVE-2014-1635)
A buffer overflow vulnerability has been reported in Belkin N750 router. The vulnerability is due to improper input validation in the router's Web interface. A remote attacker could exploit this vulnerability by sending a malicious HTTP POST request to the victim. Successful exploitation of this...
Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)
A remote code execution vulnerability has been reported in Secure Channel Schannel security package. The vulnerability is caused when Schannel in a server system improperly processes specially crafted packets. An attacker could attempt to exploit this vulnerability by sending specially crafted...
Joomla Component Jw_allVideos Remote File Download (CVE-2010-0696)
A directory traversal vulnerability has been reported in Joomlaworks Jw Allvideos. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Joomla Component com_cartweberp Local File Inclusion (CVE-2010-0982)
A file inclusion vulnerability has been reported in Joomla Com Cartweberp. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_jotloader SQL Injection (CVE-2008-2564; CVE-2010-4617)
An SQL injection vulnerability has been reported in Kanich Com Jotloader. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
PHP Nuke Module htmltonuke php Remote File Inclusion (CVE-2006-0308)
A file inclusion vulnerability has been reported in Htmltonuke. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_ezautos SQL Injection (CVE-2010-4929)
An SQL injection vulnerability has been reported in Joostina-cms Com Ezautos. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Attachmate Reflection FTP Client ActiveX GetGlobalSettings Memory Corruption (CVE-2014-0603)
A memory corruption vulnerability has been found in Attachmate Reflection FTP Client. The vulnerability is due to an attempt to dereference user-controllable parameter input. Successful exploitation could lead to arbitrary code execution under the security context of the browser...
Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4092)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Windows SMB Response Handling Buffer Overflow - ver 2 (CVE-2005-0045)
A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client component. A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system. Successful exploitation would allow an attacker to take comple...
Novell ZENworks Configuration Management PreBoot Directory Traversal (CVE-2013-3706)
A directory traversal vulnerability has been reported in Novell ZENworks Configuration Manager. The vulnerability is due to the preboot service which supports an opcode that allows files to be downloaded through directory traversal. A remote attacker can exploit this vulnerability to disclose the...
IBM Lotus Domino LDAP Server Memory Exception (CVE-2006-0580; CVE-2006-4510)
A denial of service vulnerability exists in the IBM Lotus Domino LDAP Server component. The flaw is caused by improper validation of the user supplied data in an LDAP bind request. An attacker can exploit this vulnerability to terminate the target server which causes a denial of service condition...
HP SiteScope issueSiebelCmd SOAP Request Code Execution - Ver2 (CVE-2013-4835)
A command execution vulnerability has been found in HP SiteScope. The vulnerability is due to lack of authentication when handling "issueSiebelCmd" SOAP requests. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to the affected service...
Apple Webkit HTML Parsing Rowspan Denial of Service - Ver2 (CVE-2007-0342)
A denial-of-service vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Word PlfLfo Structure Memory Corruption (MS08-072) - Ver2 (CVE-2008-4024)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory corruption error in Microsoft Word that fails to properly handle specially crafted Word files. A remote attacker could trigger th...
Microsoft Excel XLSX File Parsing Code Execution (MS10-017) - Ver2 (CVE-2010-0263)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...
Internet Explorer Mouse Drag Hijack Arbitrary File Execution - Ver2 (CVE-2004-0841)
An arbitrary file execution vulnerability has been reported in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute and install arbitrary programs on the affected system...
D-link DSL-2640B Router Admin password change Information Disclosure - Ver2 (CVE-2010-1308)
An information disclosure vulnerability has been reported in La-souris-verte Com Svmap. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Office Excel OBJ Record Parsing Remote Code Execution - Ver2 (CVE-2009-0557)
A code execution vulnerability has been reported in Microsoft Office Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft PowerPoint Viewer 2003 Picture Integer Overflow - Ver2 (CVE-2008-0120)
An integer overflow vulnerability has been reported in Microsoft Office PowerPoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0271)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
Microsoft OpenType Font Index Privilege Escalation - Ver2 (CVE-2010-3956)
A privilege escalation vulnerability has been reported in the OpenType Font OTF format driver. The vulnerability is due to an error in the OpenType Font OTF format driver that fails to properly index an array when parsing OpenType fonts. A remote attacker could exploit this vulnerability via a...
Mac OS X Safari x-man-page URI Terminal Escape Command Execution - Ver2 (CVE-2005-1342)
A command execution vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Silverlight Null Pointer Dereference Code Execution (MS13-052; CVE-2013-3178)
A null pointer dereference vulnerability exists in Microsoft Silverlight...
Microsoft Internet Explorer Memory Corruption (CVE-2013-3893)
A remote code execution vulnerability has been reported in Internet Explorer...
Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Code Execution (CVE-2013-1559)
A remote code execution vulnerability exists in Oracle WebCenter Content...
FreeBSD NFS Server READDIR Request Memory Corruption (CVE-2013-3266)
A memory corruption vulnerability has been reported in nfsrvdreaddir function in FreeBSD NFS server. The vulnerability is due to insufficient sanitation of READDIR requests and can result in the underlying filesystem to interpret a file as a directory. A remote attacker can exploit this...
Novell GroupWise Client ActiveX gwabdlg.dll Untrusted Pointer Dereference (CVE-2013-0804)
An untrusted pointer dereference vulnerability has been reported in Novell GroupWise Client for Windows...
3S Smart Software Solutions CoDeSys Gateway Server Memory Access Error (CVE-2012-4704)
A memory access error vulnerability has been reported in Smart Software CoDeSys Gateway Server...
Microsoft Internet Explorer Multiple Dom Objects Memory Corruption (MS13-047; CVE-2013-3124)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer...
Internet Explorer CMarkupTransNavContext Use After Free (MS13-037; CVE-2013-1308)
A Code Execution vulnerability exists in Internet Explorer. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. When Internet Explorer attempts to access an object in memory that has been deleted, it may corrupt memory in such a way th...
Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)
A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6. The vulnerability is due to an error while handling certain chunks within a specially crafted PNG file. A remote attacker can exploit this vulnerability by enticing a user to open a malicious PNG file. Successful...
Microsoft Word CSS Processing Code Execution - Improved Performance (MS08-026; CVE-2008-1434)
A remote code execution vulnerability has been identified in Microsoft Word...
Apple iTunes m3u Playlist Multiple Buffer Overflows - High Confidence (CVE-2012-0677)
Multiple buffer overflow vulnerabilities have been reported in Apple iTunes. The vulnerabilities are due to a bounds checking error in iTunes while handling specially crafted .m3u files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .m3u file with ...
IBM Lotus Notes WPD Attachment Handling Code Execution (CVE-2008-4564)
A stack-based buffer overflow vulnerability exists in the IBM Lotus Notes WPD...
Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076; CVE-2012-1885)
A remote code execution vulnerability has been reported in Microsoft Excel...
Microsoft Excel Malformed File Memory Corruption (MS12-076; CVE-2012-1886)
A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel file. Successful...
IBM Tivoli Provisioning Manager Express User.updateUserValue SQL Injection (CVE-2012-0199)
An SQL injection vulnerability has been reported in IBM Tivoli Provisioning Manager Express...
Novell Netware XNFS.NLM Heap Buffer Overflow (CVE-2011-4191)
A heap buffer overflow vulnerability has been reported in Novell Netware...
Microsoft Windows Font Library File Buffer Overflow (CVE-2011-2003)
A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to an input validation error when the kernel parses a .FON font file. A remote attacker could exploit this issue by enticing a target user to open a specially crafted .FON file. Successful exploitatio...
Microsoft PowerPoint Insecure Library Loading (MS11-094; CVE-2011-3396)
A remote code execution vulnerability has been reported in Microsoft PowerPoint. The vulnerability is due to an error in the way Microsoft PowerPoint restricts the path used for loading external libraries. A remote attacker could exploit this vulnerability by enticing a user to open a legitimate...
Preemptive Protection against Novell GroupWise Internet Agent RRULE Time Conversion Invalid Array Indexing (CVE-2011-2663)
A remote code injection and execution vulnerability has been reported in Novell GroupWise Internet Agent GWIA...
ISC BIND CNAME RRSIG Request Denial of Service (CVE-2011-2465)
A denial of service vulnerability has been reported in ISC BIND. The vulnerability is due to an error while handling RRSIG requests. A remote attacker may exploit this vulnerability by sending a crafted RRSIG request to an affected server. Successful attack may cause the service to terminate...
Multiple Products STARTTLS Plaintext Command Injection (CVE-2011-0411; CVE-2014-3556)
STARTTLS is an extension to plaintext communication protocols that offers a way to upgrade plain text communications to an encrypted TLS or SSL connection. Protocols such as SMTP and FTP can be TLS-secured with a compatible server by a client sending the STARTTLS command. A command injection...
Microsoft Office Excel SupBook Record Linked List Corruption (MS11-021; CVE-2011-0979)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly manage the members of a data structure while parsing a specially crafted Excel...
Novell ZENworks Configuration Management TFTPD Heap Buffer Overflow (CVE-2010-4323)
Novell ZENworks Configuration Management is an IT desktop computer management suite that is based on a client/server architecture. A management server collects and sends data of managed assets by communicating with client applications installed on computers, or via other management protocols. A...