13538 matches found
IBM Domino LDAP Server ModifyRequest Stack Buffer Overflow (CVE-2015-0117)
A stack buffer overflow vulnerability exist in IBM Domino's LDAP Server. The vulnerability is due to insufficient validation of input leading to copying an indefinite amount of data from a crafted ModifyRequest LDAP message to a fixed length stack buffer. A remote, unauthenticated attacker can...
Microsoft Office Memory Corruption (MS15-99: CVE-2015-2521)
A remote code execution vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted fi...
Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2498)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Wavelink Emulation License Server HTTP Header Processing Buffer Overflow (CVE-2015-4059)
A buffer overflow vulnerability exists in Wavelink Emulation License Server. The vulnerability is due to a boundary error when parsing HTTP headers. By sending crafted requests to a vulnerable server, a remote unauthenticated attacker can possibly exploit this vulnerability to execute arbitrary...
Microsoft Office Component Use After Free (MS15-081: CVE-2015-1642)
A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a...
Microsoft Internet Explorer Information Disclosure (MS15-065: CVE-2015-2402)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in validation of registry key locations. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of...
Microsoft Office Memory Corruption (MS15-070: CVE-2015-2376)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
Microsoft Internet Explorer Table Layout Memory Corruption - Ver2 (CVE-2008-2258)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a memory corruption in the way Internet Explorer handles HTML tables. Remote attackers can entice target users to visit a malicious web page via a vulnerable version of the Internet...
Microsoft Internet Explorer Deleted Object Code Execution (MS13-037) - Ver2 (CVE-2013-1312)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1666)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft IIS HTR Request Buffer Overflow - Ver2 (CVE-2002-0071)
...
Oracle Demantra 1221 Arbitrary File Disclosure - Ver2 (CVE-2013-5877)
An information disclosure vulnerability has been reported in Oracle Supply Chain Products Suite. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Windows Schannel Remote Code Execution - Ver2 (CVE-2014-6321)
A code execution vulnerability has been reported in Secure Channel Schannel security package. An attacker could exploit this vulnerability by sending specially crafted packets to a Windows server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
Microsoft Internet Explorer Elevation of Privilege (MS15-018: CVE-2015-1627)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Office Shared Component ASLR Bypass (MS15-013; CVE-2014-6362)
A security feature bypass vulnerability exists in Microsoft Office Shared Component. The vulnerability is due to an improper implementation of Address Space Layout Randomization ASLR by MSCOMCTL common controls library used by Microsoft Office software. A remote attacker can exploit this issue by...
XChat Bounds Checking Buffer Overflow (CVE-2011-5129)
A buffer overflow vulnerability exists in XChat. Successful exploitation of this vulnerability will cause a crash, and may allow injection and execution of arbitrary code. The vulnerability is due to insufficient bounds checking. A remote attacker could exploit this vulnerability by sending a...
ManageEngine Multiple Products WsDiscoveryServlet Directory Traversal (CVE-2014-5302)
A directory traversal vulnerability exists in ManageEngine ServiceDesk Plus, AssetExplorer and IT360. The vulnerability is due to lack of authentication and insufficient input validation on the "computerName" parameter sent in HTTP requests to the WsDiscoveryServlet. A remote unauthenticated...
Internet Explorer 70 Beta 2 BGSOUND DoS - Ver2 (CVE-2006-0544)
A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Windows Explorer ICO File Format Divide by Zero Denial of Service - Ver2 (CVE-2007-2237)
A denial-of-service vulnerability has been reported in Microsoft Windows XP. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Advantech WebAccess HMI and SCADA Software CrossSite Scripting - Ver2 (CVE-2012-0233)
A cross-site scripting vulnerability has been reported in Advantech Webaccess. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Mitsubishi MCWorkX ActiveX Control File Execution Command Execution - Ver2 (CVE-2013-2817)
A command execution vulnerability has been reported in Mitsubishielectric Mc-worx Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Joomla Component com_janews Local File Inclusion (CVE-2010-1219)
A file inclusion vulnerability has been reported in Joomla Com Janews. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
XOOPS Module Tiny Event Remote SQL Injection (CVE-2007-1811)
An SQL injection vulnerability has been reported in Chapi Tiny Event. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_simpleshop SQL Injection (CVE-2008-2568)
An SQL injection vulnerability has been reported in Joomla Com Simpleshop and Joomla. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component JESectionFinder Directory traversal (CVE-2010-2680)
A directory traversal vulnerability has been reported in Harmistechnology Com Jesectionfinder. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Foxit Reader PDF Files Processing Buffer Overflow (CVE-2009-0837)
There exists a Stack-based buffer overflow in Foxit Reader, which allows remote attackers to execute arbitrary code via a long relative path or absolute path in the filename argument in an action...
GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187)
A remote code execution vulnerability has been reported in several versions of GNU Bash. The vulnerability, aka ShellShock, is due to an error in the way GNU Bash processes trailing strings after function definitions in the values of environment variables...
Microsoft Windows Kodak Image Viewer Code Execution (MS07-055) - ver 2 (CVE-2007-2217)
A buffer overflow vulnerability has been reported in Microsoft Windows Kodak Image Viewer. The vulnerability is due to improper parsing of specially crafted image files, such as TIFF files. An attacker can exploit this vulnerability by constructing a specially crafted image and enticing a victim ...
WordPress MailPoet Newsletters Unauthenticated File Upload (CVE-2014-4725)
An arbitrary file upload vulnerability exists in the WordPress plug-in MailPoet Newsletters. The vulnerability is due to lack of access control validation. A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted request to the server...
libav LZO Integer Overflow (CVE-2014-4609)
A code execution vulnerability exists in the libav library. The vulnerability is due to an integer overflow while processing literal runs in the LZO compressed data. A remote unauthenticated attacker could exploit this vulnerability by enticing a target user to open a crafted file with an...
Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1775)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Adobe ColdFusion Server invoke() Method Code Execution (CVE-2013-3350)
A remote code execution has been reported in Adobe ColdFusion server. The vulnerability is due to a bug in the invoke method. A remote attacker can exploit this issue by changing values on a page hosted on the affected server...
Microsoft Excel Record Parsing Code Execution - Ver2 (CVE-2011-3403)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to improper handling of certain records in Microsoft Excel while parsing malformed Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
Apple Quicktime RTSP URL Buffer Overflow - Ver2 (CVE-2007-0015)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying still image files as well as numerous audio and video formats. It also provides libraries and plugins for other applications, such as browsers, to read QuickTime media...
Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024) - Ver2 (CVE-2013-0080)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...
Internet Explorer Outlook Express Address Book ActiveX Denial of Service - Ver2 (CVE-2005-4840)
A denial-of-service vulnerability has been reported in Microsoft Outlook Express Book Control. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Word RTF Drawing Primitives Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4028)
Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...
Apple Safari out-of-bounds access Denial of Service - Ver2 (CVE-2008-2001)
A denial-of-service vulnerability has been reported in Apple Safari. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0304)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Cisco IOS HTTP Authentication Bypass - Ver2 (CVE-2001-0537)
An authentication bypass vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
VLC Ogg Vorbis Comment Header Format String Denail of Service - Ver2 (CVE-2007-3316)
A denial-of-service vulnerability has been reported in Videolan Vlc Media Player. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
PHP POST File Upload Buffer Overflow - Ver2 (CVE-2002-0081)
A buffer overflow vulnerability has been reported in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PHPLiveHelper global.php abs_path Parameter PHP Code Execution - Ver2 (CVE-2006-4051)
A code execution vulnerability has been reported in Turnkey Web Tools PHP Live Helper. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PSlash Web Portal index.php Code Execution - Ver2 (CVE-2001-1235)
A code execution vulnerability has been reported in PSlash Web Portal. A remote attacker could trigger this vulnerability by including files from remote web sites using an HTTP request that modifies the includedir variable. Successful exploitation of this vulnerability could allow a remote attack...
Supermicro Onboard IPMI Static SSL Certificate Scanner Information Disclosure (CVE-2013-3619)
An SSL keys handling flaw has been reported in Supermicro IPMI firmware...
IBM Cognos tm1admsd.exe Buffer Overflow (CVE-2012-0202)
Multiple stack-based buffer overflow vulnerabilities have been reported in IBM Cognos TM1 Admin Server...
NTR ActiveX Control StopModule() Remote Code Execution (CVE-2012-0267)
A remote code execution vulnerability has been reported in the NTR ActiveX 1.1.8...
HP Intelligent Management Center IctDownloadServlet Information Disclosure (CVE-2012-5204)
An information disclosure vulnerability exists in HP Intelligent Management Center...