13538 matches found
CheckPoint VPN1 ASN 1 Decoding Heap Overflow attack - Ver2 (CVE-2004-0699)
A buffer overflow vulnerability has been reported in Checkpoint VPN-1 and Checkpoint Firewall-1. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Wordpress Photo Gallery Plugin Unrestricted File Upload (CVE-2014-9312)
An unauthorized file upload vulnerability has been reported in Wordpress Photo Gallery Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...
Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8451)
An Information Disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an improper implementation of a Javascript API. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...
Apache HTTP Server mod_deflate Denial of Service - Ver2 (CVE-2014-0118)
A denial of service vulnerability exists in Apache HTTP server. The vulnerability exists in the moddeflate module and is due to a resource exhaustion that is related to request body decompression configuration. A remote, unauthenticated attacker can leverage this vulnerability by sending a...
Microsoft Fax Cover Page Editor Buffer Overflow - Ver2 (CVE-2010-4701)
A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...
Golden FTP PASS Buffer Overflow (CVE-2006-6576)
Golden FTP Server is prone to a remote buffer-overflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer.Exploiting this vulnerability may allow remote attackers to execute arbitrary code in the context of the affected...
Joomla Component com_liveticker SQL Injection (CVE-2008-6148)
An SQL injection vulnerability has been reported in Raven-worx Liveticker. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Red Hat JBoss RESTEasy PARAMETER ENTITY XXE Information Disclosure (CVE-2014-3490)
An information disclosure vulnerability has been reported in Red Hat JBoss RESTEasy. This is due to an incorrectly configured XML parser accepting XML eXternal Entities XXE from the RESTEasy endpoint. A remote unauthenticated attacker may exploit this vulnerability on a web application powered by...
Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4092)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-051: CVE-2014-2823)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-051: CVE-2014-4057)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Windows TCP Denial of Service (MS14-031; CVE-2014-1811)
A denial-of-service vulnerability exists in Microsoft Windows and Windows Server. The vulnerability is due to TCP/IP stack failing to properly handle crafted packets. A remote unauthenticated attacker can exploit this vulnerability by sending crafted packets to the target system...
D-Link HNAP Request Stack Buffer Overflow (CVE-2014-3936)
A remote code execution vulnerability exists in D-Link routers. The vulnerability is due to a stack buffer overflow while processing crafted HTTP POST requests addressed to the HNAP handler. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary code on the affected...
Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1775)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Office Chinese Grammar Checker Insecure Library Loading (MS14-023; CVE-2014-1756)
An insecure library loading vulnerability has been reported in Microsoft Office proofing tools. The vulnerability is due to the way that the Chinese Simplified Grammar Checker component handles the loading of dynamic-link library .dll files. A remote attacker could exploit this vulnerability by...
Adobe ColdFusion Server invoke() Method Code Execution (CVE-2013-3350)
A remote code execution has been reported in Adobe ColdFusion server. The vulnerability is due to a bug in the invoke method. A remote attacker can exploit this issue by changing values on a page hosted on the affected server...
Novell iPrint Client ActiveX GetPrinterURLList2 Memory Corruption - Ver2 (CVE-2011-4185)
A memory corruption vulnerability has been reported in Novell iPrint Client ActiveX control. The vulnerability is due to improper validation of user-supplied string parameters. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...
Microsoft Word Access Violation Code Execution - Ver2 (CVE-2011-1983)
A code execution vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in the way Microsoft Word handles objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Biff Record PtgName Entries Code Execution (MS10-080) - Ver2 (CVE-2010-3235)
Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly validate formula information upon opening a specially crafted Excel file. A remote...
Microsoft Word UPX Data Stack Validation Buffer Overflow - Ver2 (CVE-2010-3214)
A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in Microsoft Word that fails to properly validate UPX structures within specially crafted Word files. Successful exploitation of this vulnerability could allow a remote attacker to...
Altnet Download Manager ActiveX Buffer Overflow - Ver2 (CVE-2007-5217)
A buffer overflow vulnerability has been reported in Altnet Download Manager. An attacker could exploit this vulnerability a long argument to the Install method. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Microsoft Office Excel Label Record Buffer Overflow (MS11-021) - Ver2 (CVE-2011-0098)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a flaw in the parsing of Label record in Excel documents, causing a buffer overflow. Remote attackers can exploit this vulnerability by enticing target users to open a malicious Excel file. In ...
Internet Explorer ActiveX Navigate Handling Code Execution (MS08-073) - Ver2 (CVE-2008-4258)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that fails to properly validate parameters made during a method call in the...
GomPlayer wav Buffer Overflow - Ver2 (CVE-2013-5716)
A buffer overflow vulnerability has been reported in Gomlab Gom Player. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Wim Fleischhauer Docpile INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4076)
A code execution vulnerability has been reported in Wim Fleischhauer Docpile. An attacker could exploit this vulnerability via a URL in the INITPATH parameter to lib/access.inc.php, lib/folders.inc.php, lib/init.inc.php or lib/templates.inc.php. Successful exploitation of this vulnerability could...
IBM WebSphere Application Server Cross-Site Scripting - Ver2 (CVE-2009-0855)
A cross-site scripting vulnerability has been reported in IBM WebSphere Application Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Microsoft GDI+ WMF Integer Overflow (MS09-062) - Ver2 (CVE-2009-2500)
The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer.Windows Metafile WMF is a 16-bit metafile image format optimized for the Windows operating system that can contain both vector information and bitmap...
Novell ZENworks Asset Management File Upload Directory Traversal - Ver2 (CVE-2010-4229)
A directory traversal vulnerability has been reported in Novell ZENworks. The vulnerability is due to improper handling of path names when uploading files via ZENworks Asset Management. Successful exploitation of this vulnerability would allow a remote attacker to list directories, create arbitra...
VLC Media Player RTSP Plugin Stack Buffer Overflow (CVE-2013-6933)
A stack buffer overflow exists in VideoLAN VLC Media Player. The vulnerability is due an error in VLC's embedded Live555 RTSP library, when handling RTSP requests. Incorrect handling of RTSP commands can result in a stack buffer overflow. A remote unauthenticated attacker could exploit this...
Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0298)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Excel XLSX File Parsing Code Execution (MS10-017) - Ver2 (CVE-2010-0263)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...
VLC Ogg Vorbis Comment Header Format String Denail of Service - Ver2 (CVE-2007-3316)
A denial-of-service vulnerability has been reported in Videolan Vlc Media Player. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Office Excel OBJ Record Parsing Remote Code Execution - Ver2 (CVE-2009-0557)
A code execution vulnerability has been reported in Microsoft Office Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Internet Explorer Mouse Drag Hijack Arbitrary File Execution - Ver2 (CVE-2004-0841)
An arbitrary file execution vulnerability has been reported in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute and install arbitrary programs on the affected system...
Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0271)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
PHP POST File Upload Buffer Overflow - Ver2 (CVE-2002-0081)
A buffer overflow vulnerability has been reported in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CA BrightStor Arcserve Media Server Stack Buffer Overflow - Ver2 (CVE-2007-2139)
A buffer overflow vulnerability has been reported in CA BrightStor ARCserve Media Server. The vulnerability is due to insufficient boundary checking when processing crafted strings supplied in SUN RPC requests. Successful exploitation of this vulnerability could allow a remote attacker to execute...
NTP Servers Monlist Command Denial of Service (CVE-2013-5211)
There exists a design flaw in NTP servers that can allow attackers to perform DoS attacks against target machines. A remote attacker can leverage this flaw by sending a specially crafted request to an affected NTP server...
Microsoft IIS ASP Handling Code Execution (MS08-006) - Ver2 (CVE-2008-0075)
Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of dynamic content, notably in the form...
AINS function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0570)
A code execution vulnerability has been reported in Johannes Gijsbers Ad Fundum Integratable News Script AINS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Mac OS X Safari x-man-page URI Terminal Escape Command Execution - Ver2 (CVE-2005-1342)
A command execution vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
ABB Test Signal Viewer CWGraph3D ActiveX Arbitrary File Creation (CVE-2013-5022)
An arbitrary file writing vulnerability exists in ABB Test Signal Viewer. The vulnerability is due to a directory traversal error in the exposed insecure method ExportStyle by the included CWGraph3D cw3dgrph.ocx ActiveX control. An attacker could exploit this vulnerability by enticing the target...
Microsoft Excel Memory Corruption (MS13-067; CVE-2013-1315)
A remote code execution vulnerability exists in the way that Microsoft Excel parses content in Excel files...
Microsoft SharePoint W3WP Denial of Service (MS13-067; CVE-2013-0081)
A denial of service vulnerability exists in Microsoft SharePoint Server...
NTR ActiveX Control StopModule() Remote Code Execution (CVE-2012-0267)
A remote code execution vulnerability has been reported in the NTR ActiveX 1.1.8...
Microsoft Internet Explorer Memory Corruption (MS13-059: CVE-2013-3188)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
FreeBSD NFS Server READDIR Request Memory Corruption (CVE-2013-3266)
A memory corruption vulnerability has been reported in nfsrvdreaddir function in FreeBSD NFS server. The vulnerability is due to insufficient sanitation of READDIR requests and can result in the underlying filesystem to interpret a file as a directory. A remote attacker can exploit this...
3S Smart Software Solutions CoDeSys Gateway Server Denial Of Service (CVE-2012-4707)
A denial of service vulnerability has been reported in 3S Smart Software Solutions CoDeSys Gateway Server...