Oracle Endeca IDI ETL Server UploadFileConent Directory Traversal (CVE-2015-2602)

A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the UploadFileConent operation. A remote authenticated attacker can leverage this vulnerability to...

ManageEngine ServiceDesk File Upload Directory Traversal

A directory traversal vulnerability exists in ManageEngine ServiceDesk. The specific flaw occurs in the way the vulnerable product extracts uploaded ZIP files. An authenticated attacker can exploit this vulnerability to upload arbitrary files to the target server which could further lead to...

Oracle Endeca Information Discovery Integrator ETL Server CopyFile Directory Traversal (CVE-2015-2604)

A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the CopyFile operation. By sending crafted SOAP requests to the target system, a remote authenticate...

Endian Firewall Proxy Password Change Command Execution (CVE-2015-5082)

A command injection vulnerability has been reported in Endian Firewall. The vulnerability is due to an input validation error in a CGI script. A remote, authenticated attacker can exploit this vulnerability by sending crafted HTTP requests to the target. Successful exploitation could lead to remo...

ISC BIND DNSSEC Validation Denial of Service (CVE-2015-4620)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to an error during DNSSEC validation. A remote attacker can exploit this vulnerability by sending crafted queries under certain circumstances...

OpenSSL X509_cmp_time Denial of Service (CVE-2015-1789)

A denial-of-service vulnerability exists in OpenSSL. The vulnerability is due to an error in X509cmptime that causes OpenSSL to read beyond the end of a buffer. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted certificate to a vulnerable OpenSSL client or...

Apache ActiveMQ File Upload Directory Traversal (CVE-2015-1830)

A directory traversal vulnerability exists in Apache ActiveMQ. The vulnerability is due to a flaw in the file server upload/download functionality used for blob messages. A remote, unauthenticated attacker may exploit this vulnerability by uploading a specially crafted file to the server...

Symantec Endpoint Protection ConsoleServlet ResetPassword Policy Bypass (CVE-2015-1486)

An authentication bypass vulnerability exists in Symantec Endpoint Protection. This vulnerability is due to a design flaw that lets unauthenticated users to retrieve a valid session token. A remote, unauthenticated attacker may exploit this vulnerability to create an admin account and access the...

Oracle Data Quality Trillium Based SetBasicPreviewData Type Confusion (CVE-2015-4759)

A remote code execution vulnerability exists in Oracle Data Quality TSS12.LoaderWizard.lwctrl ActiveX control. The vulnerability is due to a type confusion when handling data passed to SetBasicPreviewData. A remote attacker can exploit this vulnerability by enticing a user to access a maliciously...

Oracle Endeca Information Discovery Integrator ETL Server MoveFile Directory Traversal (CVE-2015-2605)

A directory traversal vulnerability has been reported in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to a lack of input validation. A remote attacker can exploit this vulnerability by sending crafted SOAP requests to the target system, leading to informatio...

Dell NetVault Backup Denial of Service (CVE-2015-5696)

A Denial of Service vulnerability has been reported in Dell NetVault service. The vulnerability exists in Dell NetVault's nvpmgr.exe and is due to the way invalid "Subcode data" is handled when there is the relevant "Code" value. A remote attacker can trigger this flaw by establishing a connectio...

Avira Management Console Server HTTP Header Processing Heap Buffer Overflow

A heap buffer overflow vulnerability has been reported in Avira Management Console Server. The vulnerability exists in the way Update Manager Service handles overly long HTTP headers. A remote unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the server...

Oracle Endeca Information Discovery Integrator ETL Server RenameFile Directory Traversal (CVE-2015-2606)

A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the RenameFile operation. By sending crafted SOAP requests to the target system, a remote...

ManageEngine OpManager AgentDetailsUtil agentKey SQL Injection

An SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the agentKey parameter when processing requests sent to "com.manageengine.opmanager.servlet.AgentDetailsUtil". A remote attacker can exploit this vulnerability to inject and...

ManageEngine Multiple Products It360SPUtil resIds SQL Injection

An SQL injection vulnerability has been reported in ManageEngine Applications Manager and ManageEngine IT360 MSP Edition. This vulnerability is due to the insufficient validation of user-supplied input when processing requests sent to the It360SPUtil class. A remote, unauthenticated attacker can...

EMC AutoStart ftagent Opcode 83 Subcode 22 SQL Injection (CVE-2015-0538)

A remote SQL injection vulnerability exists in EMC AutoStart. The vulnerability is due to insufficient validation of remotely supplied data within the ftagent component. A remote unauthenticated attacker can leverage this vulnerability by sending malicious requests to the ftagent process...

EMC AutoStart ftagent Opcode 85 Subcode 33 SQL Injection (CVE-2015-0538)

A remote SQL injection vulnerability exists in EMC AutoStart. The vulnerability is due to insufficient validation of remotely supplied data within the ftagent component. A remote unauthenticated attacker can leverage this vulnerability by sending malicious requests to the ftagent process...

Adobe Flash Player Heap Buffer Overflow (APSB15-23: CVE-2015-5587)

A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Flash Player Buffer Overflow (APSB15-23: CVE-2015-6676)

A buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Security Bypass (APSB15-23: CVE-2015-5572)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...

Adobe Flash Player Memory Corruption (APSB15-23: CVE-2015-5574; CVE-2015-7644)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Buffer Overflow (APSB15-23: CVE-2015-6678)

A buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB15-23: CVE-2015-5570)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Security Bypass (APSB15-23: CVE-2015-6679)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...

Adobe Flash Player Use After Free Code Execution (APSB15-23: CVE-2015-6682)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Security Bypass (APSB15-23: CVE-2015-5568)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...

Adobe Flash Player Memory Corruption (APSB15-23: CVE-2015-5567)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Type Confusion (APSB15-23: CVE-2015-5573)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

Adobe Flash Player Memory Corruption (APSB15-23: CVE-2015-5588)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

IBM Lotus Domino BMP Parsing Integer Overflow (CVE-2015-1902)

An integer overflow vulnerability has been reported in IBM Lotus Domino. The vulnerability is due to improper bounds checking when parsing a BMP image with crafted dimensions. This could potentially lead to an undersized buffer being allocated. A remote, unauthenticated attacker can exploit this...

Suspicious HTML Mail Phishing Attempt

Several mail phishing campaigns use malicious HTML files to lure victim users to send the attacker the username and password to their e-mail account...

WordPress Mobile Pack Information Disclosure (CVE-2014-5337)

An information disclosure vulnerability has been reported in WordPress Mobile Pack Plugin. Successful exploitation of this vulnerability would allow a remote attacker to read files with privileged information...

Bugzilla Mail Authentication Mechanism Bypass (CVE-2015-4499)

An authentication mechanism bypass vulnerability has been found in Bugzilla. Any unauthenticated remote attacker may leverage this vulnerability to gain access to database information regarding unpatched bugs, and exploit them to attack the affected pieces of software before security patches are...

reestr Root Directory Creation Mail Phishing Attempts

Mail phishing attempts including root directory creation has been discovered. By deceiving the system administrator to implant a backdoor an attacker may run arbitrary code on the affected web server...

Adobe Flash Player Use after Free Code Execution (APSB15-19: CVE-2015-5127)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Microsoft Outlook RTF Embedded Object Security Bypass (CVE-2004-0503)

A security bypass vulnerability exists in Microsoft Outlook. The vulnerability is due to a lack of validation for certain OLE objects attached to RTF messages. A successful exploitation may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-locati...

Cisco Router SYNful Knock Implant TCP Activator

A router implant vulnerability, known as SYNful Knock has been reported in multiple Cisco routers . A successful exploitation might enable the attacker to modify the router's firmware, and thereby allow running arbitrary code, or using the server as a bot for further attacks...

Cisco Router SYNful Knock Implant HTTP Request

A router implant, known as SYNful Knock, has been reported in multiple Cisco routers. The implant might enable an attacker to modify the router's firmware and run arbitrary code, or use the router as a bot for further attacks...

Adobe Reader and Acrobat Corrupted Stream Denial of Service

Corruption found in encoded streams inside PDF files may cause Adobe Reader and Acrobat to fail to decode these streams, which might lead to a denial of service condition. An attacker could exploit this vulnerability by sending a malformed PDF file containing such corruption inside encoded stream...

Microsoft Office Malformed EPS File Remote Code Execution (MS15-099; CVE-2015-2545)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error while parsing a file containing a malformed graphics image. An attacker could exploit the vulnerability by constructing a specially crafted EPS file...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2485)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer handle element identifiers since it fails to detect a specific failure case which can be abused to corrupt arbitrary memory. A remote attacker can exploit...

Microsoft Windows Journal Remote Code Execution (MS15-098: CVE-2015-2513)

A remote code execution vulnerability has been reported in Microsoft Windows Journal. The vulnerability is due to the way Windows Journal processes specially crafted jnt files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted jnt file...

Microsoft Windows Media Center Remote Code Execution (MS15-100: CVE-2015-2509)

A flaw has been reported in Windows Media Center when parsing MCL files. This flaw could allow malicious users to execute arbitrary code on a target Windows system by enticing the victim to open a specially crafted Media Center file...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2499)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer dealing with an object that can cause an out-of-bound memory access. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2487)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2490)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2492)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Revived Wire Media PHP File Manager Username Backdoor

An attacker might use a backdoor which exists in PHP File Manager's user database. A successful exploitation might allow the attacker to create an administrator user on vulnerable installations or to run arbitrary code...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2493)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

PHP Unserialize Function Use After Free

A use-after-free vulnerability has been reported in PHP when deserializing certain SPL objects . A remote attacker can exploit this vulnerability by sending a crafted request to the vulnerable server. A successful attack could result in arbitrary code execution on the vulnerable server...