Internet Explorer CSS Strings Parsing Memory Corruption (MS07-045; CVE-2007-0943)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The application is also capable of using Cascading Style Sheets CSS. A remote code execution...

Macrovision InstallShield Update Service isusweb.dll Remote Buffer Overflow (CVE-2007-6654)

Macrovision InstallShield line of products provides solution to software publishers and developers for electronically packaging, distributing, and updating their applications. More specifically, InstallShield is a software tool for creating installers or software packages. A buffer overflow...

Subversion svn Protocol String Parsing (CVE-2004-0413)

Subversion is a revision control system that handles svn protocol requests. A specially crafted svn request could cause svnserve, the daemon that handles svn protocol requests, to allocate insufficient heap memory and overflow the heap. It is possible for a malicious attacker to run arbitrary cod...

Microsoft PowerPoint Viewer TextBytesAtom Record Stack Overflow (MS10-004; CVE-2010-0033)

PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint TextBytesAtom record when processing malicious PowerPoint...

BlackBerry Application Web Loader ActiveX Control Buffer Overflow (CVE-2009-0305)

The BlackBerry Application Web Loader allows to download the BlackBerry applications from a web server using a browser supporting ActiveX controls onto a handheld device. It makes deployment of new applications and updates easier for developers. A user can load the application to their BlackBerry...

Microsoft Office Drawing Record msofbtOPT Code Execution (MS07-015; CVE-2007-0671)

Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applications and components. There exists a vulnerability in Microsoft Office products. The flaw is...

Ipswitch WS_FTP Server Commands Buffer Overflow Denial of Service (CVE-2004-1135)

The Ipswitch WSFTP server is a full featured secure FTP server complete with several optional authentication mechanisms, encryption and data access controls. It is fully compliant with the File Transfer Protocol specifications. A vulnerability exists in the way Ipswitch WSFTP server parses certai...

CVS Max-dotdot Protocol Command Integer Overflow (CVE-2004-0417)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

Oracle Application Server Reports Arbitrary System Command Execution (CVE-2005-2371)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. One of such component is the Oracle Reports Services. The Reports Services component allows...

Apache Tomcat URIencoding Directory Traversal (CVE-2007-0450; CVE-2008-2938)

Apache Tomcat is an implementation of the Java Servlet and JavaServer pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

Novell NetMail IMAP APPEND Command Buffer Overflow (CVE-2006-6425)

Novell NetMail is an electronic mail server product. Novell NetMail supports various email access and exchange protocols, including IMAP. The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of...

Castle Rock Computing SNMPc Network Manager Community String Buffer Overflow (CVE-2008-2214)

SNMPc is a secure distributed network management system developed by Castle Rock Computing. SNMPc uses Simple Network Management Protocol SNMP to communicate with other network entities. A buffer overflow vulnerability exists in Castle Rock Computing SNMPc Network Manager. The vulnerability can b...

Ipswitch IMail IMAP LOGIN Special Character Buffer Overflow (CVE-2005-1255)

The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...

TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)

TCP/IP is a set of networking protocols that are widely used on the Internet. TCP/IP provides communications across interconnected networks of computers that have diverse hardware architectures and that run various operating systems. Multiple vulnerabilities exist in TCP/IP processing in Microsof...

Oracle Secure Enterprise Search search_p_groups Cross-Site Scripting (CVE-2009-1968)

Oracle Secure Enterprise Search SES, a standalone product from Oracle, enables a secure, high quality search across all enterprise information assets. Oracle Database Secure Enterprise Search contains a flaw that allows a remote cross site scripting attack. This flaw exists because the applicatio...

Update Protection against Oracle Application Server 10g OPMN Service Format String Vulnerability

A vulnerability was reported in Oracle Application Server, a multi-platform solution for developing and deploying enterprise applications and web sites. The flaw is due to insufficient validation of the URI part of HTTP requests. Remote attackers could exploit this vulnerability by sending a...

Workaround for Microsoft Windows Kernel Input Validation Remote Code Execution Vulnerability (MS09-006)

A remote code execution vulnerability has been discovered in the Windows kernel. The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. This vulnerability is caused by the improper validation of...

Microsoft Exchange Server MS-TNEF Memory Corruption (MS09-003; CVE-2009-0098)

The Microsoft Exchange Server is an implementation of an email server capable of handling numerous Internet protocol, including the Simple Mail Transfer Protocol SMTP. Transport Neutral Encapsulation Format TNEF is a format used by the Microsoft Exchange Server when sending messages formatted as...

Sun Solaris rpc.ypupdated Command Injection (CVE-1999-0208)

Sun Solaris provides its Network Information Service NIS services through the SUN-RPC remote procedure call mechanism. One of these services is called rpc.ypupdated which is responsible for duplicating information from master NIS server to slave servers. A command injection vulnerability exists i...

EPS Files (CVE-2008-3019)

EPS is a standard file format for importing and exporting PostScript files. It is usually a single page PostScript program that describes an illustration or an entire page. An EPS file can contain any combination of text, graphics and images. A remote code execution vulnerability was reported in...

Update Protection against TFTP Server Error Packet Handling Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in TFTP Server. The Trivial File Transfer Protocol TFTP is used for file transfer, allowing a remote user to download or upload files to the server. TFTP Server is an open source TFTP server service that facilitates the transfer of files to or fro...

Microsoft Color Management System Path Name Buffer Overflow (MS08-046; CVE-2008-2245)

Image Color Management ICM is a color management system that parses and uses data in International Color Consortium ICC profiles to perform color translation operations. A remote code execution vulnerability was reported in the Microsoft Color Management System. The vulnerability is due to a flaw...

Preemptive Protection against Novell Client nwspool.dll EnumPrinters Function Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in the Novel Client for Windows. The flaw is due to a boundary error in Novell Client's Spooler service nwspool.dll. The vulnerable service is included with the Novell Client for Microsoft Windows, and provides access to remote printing services...

Update Protection against Microsoft AVI File Parsing Remote Code Execution Vulnerability (MS07-064)

A remote code execution vulnerability has been reported in Microsoft DirectX. Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse various file formats which include AVI files. A remote attacker can...

Internet Explorer Pdwizard.ocx ActiveX Object Memory Corruption (MS07-045; CVE-2007-3041)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer IE ActiveX control pdwizard.ocx. ActiveX controls are reusable software components based on Microsoft Component Object Model COM. To trigger the vulnerability, an attacker can create a malicious web page that...

Microsoft Windows Internet Printing Service Integer Overflow (MS08-062; CVE-2008-1446)

The internet printing service is a component that allows printing using a remote printer in the network. A remote code execution vulnerability has been reported in Microsoft Windows internet printing service. The vulnerability is due to a flaw in the Microsoft Internet Printing Protocol IPP...

Update Protection against Microsoft Management Console (MMC) Remote Code Execution Vulnerability (MS06-044)

Microsoft Management Console MMC is prone to a cross-site scripting XSS vulnerability. MMC is an application that allows a user to perform administrative tasks, configure Windows services and more. A remote attacker can exploit this vulnerability to execute arbitrary commands on an affected syste...

PHP IMAP imap_open Command Injection (CVE-2018-19518)

A command injection vulnerability exists in the IMAP component of PHP. The vulnerability is due to improper handling of the server parameter passed to the imapopen function. A remote, authenticated attacker can exploit this vulnerability by supplying a crafted server parameter to the imapopen...

TP-Link TL-R473G Command Injection (CVE-2022-34555)

A command injection vulnerability exists in TP-Link TL-R473G. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Tenda M3 Router Buffer Overflow (CVE-2022-32034)

A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Zimbra Collaboration CRLF Injection (CVE-2022-27924)

A CRLF injection vulnerability exists in Zimbra Collaboration. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Laravel Remote Code Execution (CVE-2022-31279)

A remote code execution vulnerability exists in Laravel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

VMware vRealize Operations Manager API Server Side Request Forgery (CVE-2021-21975)

A sever-side request forgery vulnerability exists in VMware vRealize Operations Manager. Successful exploitation of this vulnerability could possibly lead to an attacker accessing administrative credentials...

Exim Use After Free (CVE-2020-28018)

A use after free vulnerability exists in Exim. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Unraid Remote Code Execution (CVE-2020-5847; CVE-2020-5849)

A remote code execution vulnerability exists in Unraid. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Form Tools SQL Injection (CVE-2021-38145)

An SQL injection vulnerability exists in Form Tools. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Windows Services for NFS ONCRPC XDR Driver Remote Code Execution (CVE-2021-26432)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

VMware vCenter Server Remote Code Execution (CVE-2021-21985)

A remote code execution vulnerability exists in VMware vCenter Server. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary code on the affected system...

Apple Quicktime Remote Code Execution (CVE-2015-3788)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

XML External Entity Over HTTP Request (CVE-2021-26703)

XML External Entity Over HTTP Request...

Apple Quicktime Remote Code Execution (CVE-2015-7089)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Rockoa SQL Injection (CVE-2020-18713)

An SQL injection vulnerability exists in Rockoa. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Windows Win32k Elevation of Privilege (CVE-2021-1698)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Access of Memory After End of Buffer (APSB21-09: CVE-2021-21046)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Marvell QConvergeConsole GUI Directory Traversal (CVE-2020-5804)

A directory traversal vulnerability exists in Marvell QConvergeConsole GUI. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

OpenCATS Remote Code Execution (CVE-2021-25294)

A remote code execution vulnerability exists in OpenCATS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows SMB Server Information Disclosure (CVE-2020-17140)

An information disclosure vulnerability has been reported in the SMBv2 component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB2SETINFO messages. A remote, authenticated attacker can exploit this vulnerability by sending crafted SMBv2 messages to the target...

OpenMRS Cross-Site Scripting (CVE-2020-5730)

A cross-site scripting vulnerability exists in OpenMRS. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

Foxit Studio Photo Out of Bounds Read (CVE-2020-8877; CVE-2020-8879)

An out of bounds read vulnerability exists in Foxit Studio Photo. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Spoofing (CVE-2020-16922)

A spoofing vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to impersonate and present itself as a legitimate host...