13538 matches found
Nuuo NVR PHP System Function Unauthenticated Remote Code Execution (CVE-2016-5675)
A remote code execution was discovered in Nuuo Network Video Recording systems with Network Attached Storage. The vulnerability is due to fails in sanitising by the PHP system function. An unauthenticated attacker may use this vulnerability to execute code on the vulnerable server...
MySQL Remote Code Execution (CVE-2016-6662; CVE-2016-6663; CVE-2016-6664)
A code execution vulnerability exists in MySQL database server. Successful exploitation could allow a remote attacker to shut down the database, modify its content, or execute arbitrary code on the affected servers...
Microsoft Office Memory Corruption (MS16-107: CVE-2016-3360)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Microsoft Internet Explorer Information Disclosure (MS16-095: CVE-2016-3321)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling URIs. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...
Microsoft Win32k Elevation of Privilege (MS16-090 : CVE-2016-3252)
An elevation of privilege vulnerability exists in Windows Kernel. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...
Microsoft Edge Memory Corruption (MS16-068: CVE-2016-3199)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
Apache Struts XSLTResult File Inclusion (CVE-2016-3082)
A file inclusion vulnerability exists in Apache's Struts 2 web application framework. The vulnerability is due to a failure to validate user's input when stylesheet is being passed as a request parameter. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP...
Microsoft Windows Win32k Elevation of Privilege (MS16-062: CVE-2016-0174)
A use after free vulnerability exists in Microsoft Windows that could be abused by attackers to elevate privileges. The vulnerability is caused when a font object is referenced after being deleted. A remote attacker can exploit this vulnerability by running a specially crafted application...
Microsoft Edge Memory Corruption (MS16-052: CVE-2016-0193)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
Microsoft Edge Memory Corruption (MS16-052: CVE-2016-0191)
A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to a use of uninitialized pointer. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption in a way that would...
Microsoft Office Memory Corruption (MS16-042: CVE-2016-0122)
A remote code execution vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted fi...
Microsoft Windows Secondary Logon Denial of Service (MS16-046: CVE-2016-0135)
A remote denial of service vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows handles memory blocks while using the LSARPC protocol. A remote attacker can exploit this issue by enticing the victim to open a specially crafted file...
Microsoft Windows CSRSS Security Feature Bypass (MS16-048: CVE-2016-0151)
An elevation of privilege vulnerability exists in Microsoft Windows CSRSS. The vulnerability is due to an error in the way windows kernel verifies tokens. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Unitronics UniDownloader and VisiLogic OPLC IDE IPWorksSSL.HTTPS Memory Corruption (CVE-2015-7905)
A memory corruption vulnerability exists in Unitronics, VisiLogic OPLC IDE and UniDownloader. The vulnerability is due to untrusted pointer dereference on the SSLCertHandle parameter of the IPWorksSSL.HTTPS ActiveX control. A remote attacker could exploit this vulnerability by enticing a vulnerab...
Adobe Flash Player Use After Free Code Execution (APSB16-04: CVE-2016-0959)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0060)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-124: CVE-2015-6139)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer parses an iCalendar ICS file. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6149)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6146)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Elevation of Privilege (MS15-106: CVE-2015-6047)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Windows Shell Remote Code Execution (MS15-109: CVE-2015-2515)
A remote code execution vulnerability has been reported in Microsoft Windows shell. The vulnerability is due to an error in the way Windows shell improperly handles objects in memory while opening a crafted toolbar object in Windows. A remote attacker can exploit this issue by enticing a victim t...
Microsoft Internet Explorer Memory Corruption (MS15-106: CVE-2015-6048)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
General Electric MDS PulseNET FileDownloadServlet Directory Traversal (CVE-2015-6459)
A directory traversal vulnerability exists in the General Electric MDS PulseNET products. The vulnerability is due to insufficient validation in FileDownloadServlet. An unauthenticated remote attacker can exploit this vulnerability to read and then delete an arbitrary file on the system...
Microsoft Windows OpenType Font Parsing Denial Of Service (MS15-097: CVE-2015-2506)
A denial of service vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file...
Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2486)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory . A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Microsoft Office Memory Corruption (MS15-081: CVE-2015-2469)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in handling of an uninitialized or deleted object. A remote attacker can exploit this issue by enticing a victim to open a specially crafted office file...
Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2388)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Windows OLE Elevation of Privilege (MS15-075: CVE-2015-2416)
An elevation of privilege vulnerability exists in Microsoft Object Linking and Embedding OLE technology. The vulnerability is caused when OLE objects are improperly handled in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
HP SiteScope Log Analyzer Information Disclosure (CVE-2015-2120)
A privilege escalation vulnerability exists in HP SiteScope. The vulnerability is due to improper validation of the log path, allowing the user to read the users.config file. A remote, authenticated attacker may exploit this vulnerability by submitting a crafted log path...
LANDesk Management Suite AMTVersion Cross-Site Scripting (CVE-2014-5360)
A cross-site scripting vulnerability exists in LANDesk Management Suite. The vulnerability is due to improper validation of a user-supplied parameter AMTVersion. A remote attacker could exploit this vulnerability by enticing a target user to view crafted web content...
Microsoft Internet Explorer VBScript Memory Corruption (MS15-053: CVE-2015-1684)
A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error while processing regular expressions which allows a user to disclose memory contents of the current process. A remote attacker can exploit this issue to bypass the ASLR...
Microsoft Windows NT 4.0 DHCP Server Request Buffer Overflow attack - Ver2 (CVE-2004-0900)
A buffer overflow vulnerability has been reported in Microsoft Windows NT. An attacker could exploit this vulnerability via a malformed DHCP message. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application...
Microsoft Internet Explorer HTML Time Element Memory Corruption (MS10-090) - Ver2 (CVE-2010-3346)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...
MySQL Malformed Password Authentication - Ver2 (CVE-2004-0627)
MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol in addition to...
Microsoft Windows GDI+ BMP File Parsing Integer Overflow (MS08-052) - Ver2 (CVE-2008-3015)
Bitmap BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability has been discovered in the way GDI+ handles integer calculations for BMP files. The vulnerability is due to a buffer overflow when GDI+ fails to properly processes a malformed header in a...
Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1668)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Windows Task Scheduler Buffer Overflow attack - Ver2 (CVE-2004-0212)
A buffer overflow vulnerability has been reported in Microsoft Windows. A remote attacker can cause arbitrary code execution resulting in a loss of integrity using a specially crafted .job file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code ...
CheckPoint VPN1 ASN 1 Decoding Heap Overflow attack - Ver2 (CVE-2004-0699)
A buffer overflow vulnerability has been reported in Checkpoint VPN-1 and Checkpoint Firewall-1. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Internet Explorer Elevation of Privilege (MS15-018: CVE-2015-1627)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Office Component Use After Free (MS15-022: CVE-2015-0085)
A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a...
Wordpress Photo Gallery Plugin Unrestricted File Upload (CVE-2014-9312)
An unauthorized file upload vulnerability has been reported in Wordpress Photo Gallery Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...
Internet Explorer 70 Beta 2 BGSOUND DoS - Ver2 (CVE-2006-0544)
A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Php libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1688)
A code execution vulnerability has been reported in Squery. An attacker could exploit this vulnerability via a URL in the libpath parameter to scripts in the lib directory including ase.php, devi.php, doom3.php, et.php, flashpoint.php, gameSpy.php, gameSpy2.php, gore.php, gsvari.php, halo.php,...
Microsoft Graphics Component Information Disclosure (MS14-085) - ver 2 (CVE-2014-6355)
An information disclosure vulnerability has been reported in the Microsoft Graphics Component. The vulnerability is due to the way Microsoft Graphics Component improperly handles the decoding of JPEG images in memory. A remote attacker can exploit this vulnerability by enticing a user to download...
Microsoft Internet Explorer Memory Corruption (MS14-080: CVE-2014-6369)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6343; CVE-2015-1662)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Joomla Component com_mojo Remote File Include (CVE-2009-4789)
A code execution vulnerability has been reported in Mojoblog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft .NET Framework Remote Code Execution (MS14-057; CVE-2014-4121)
A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to the way .NET framework parses internationalized resource identifiers. A remote attacker could exploit this vulnerability by sending specially crafted data to the target server that...
Red Hat JBoss RESTEasy PARAMETER ENTITY XXE Information Disclosure (CVE-2014-3490)
An information disclosure vulnerability has been reported in Red Hat JBoss RESTEasy. This is due to an incorrectly configured XML parser accepting XML eXternal Entities XXE from the RESTEasy endpoint. A remote unauthenticated attacker may exploit this vulnerability on a web application powered by...
GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187)
A remote code execution vulnerability has been reported in several versions of GNU Bash. The vulnerability, aka ShellShock, is due to an error in the way GNU Bash processes trailing strings after function definitions in the values of environment variables...