13538 matches found
Adobe Flash Player Validation Bypass (APSB15-09: CVE-2015-3085; CVE-2015-3082)
A validation bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the Flash IE broker while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Web Clients HTTP URL DOM Entity Cross-Site Scripting
A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...
Web Clients HTTP URL Redirect Cross-Site Scripting
A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...
Adobe Acrobat And Reader JavaScript API code execution (APSB15-10: CVE-2015-3074)
A Restrictions Bypass Privileged JavaScript API Execution Vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the...
Web Clients HTTP URL HTML Entity Cross-Site Scripting
A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...
Web Clients HTTP URL Escape Sequence Cross-Site Scripting
A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...
DNS Tunneling
DNS Tunneling is used to pass non-DNS information using DNS messages, which are normally allowed by security devices. Malicious users or malware may use DNS tunnels to bypass inspection by the security gateway. This protection is only applicable for IPS gateway version R77.30 and above. See...
Web Clients HTTP URL JavaScript Function Cross-Site Scripting (CVE-2015-1159; CVE-2015-6099; CVE-2015-6972; CVE-2017-0068)
A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...
Adobe Reader and Acrobat Memory Leak (APSB15-10: CVE-2015-3058)
A memory leak vulnerability has been reported in Adobe Reader. The vulnerability is due to an error in Adobe Reader while handling specially crafted PDF files. A remote attacker can exploit this issue by enticing a target user to open a malicious website containing a specially crafted PDF file...
Adobe Acrobat And Reader Use-After-Free (APSB15-10: CVE-2015-3075)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB15-10: CVE-2015-3070)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader API Calls Code Execution (APSB15-10: CVE-2015-3064; CVE-2015-3061; CVE-2015-3063)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially craft...
Suspicious Link Redirection Mail Phishing Attempt
Several mail phishing campaigns use embedded redirection links to lure the victim user to download malicious files...
Non Compliant UUencoded SMTP
Unexpected characters in UUencoded SMTP data which cannot be decoded might indicate an attempt to attack the mail server...
Adobe Acrobat and Reader API Calls Code Execution (APSB15-10: CVE-2015-3069)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially craft...
Adobe Acrobat and Reader API Calls Code Execution (APSB15-10: CVE-2015-3062; CVE-2015-3060)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially craft...
Adobe Acrobat And Reader Use-After-Free (APSB15-10: CVE-2015-3059)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file. Successful exploitatio...
TEST title this is test
...
Adobe Acrobat and Reader Memory Corruption (APSB15-10: CVE-2015-3057)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error while loading a PDF containing a malicious JavaScript code. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with an affected versio...
Multiple Vendors TLS Certificate Common Name NULL Byte Input Validation Error (CVE-2015-3008; CVE-2015-3455)
A policy bypass vulnerability exists in multiple products. The vulnerability is due to incorrectly validating the common name in a certificate. It can be exploited by using a NULL character after the portion of the common name that the product expects. By exploiting this vulnerability, a remote...
WordPress Broken Link Checker Plugin Cross-Site Scripting
A cross-site scripting vulnerability has been reported in WordPress Broken Link Checker plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
WordPress Download Manager Plugin Information Disclosure
An information disclosure vulnerability has been reported in WordPress Download Manager plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to information disclosure...
Adobe Acrobat and Reader Memory Corruption (APSB15-10: CVE-2015-3050)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB15-10: CVE-2015-3056)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error while loading a PDF containing a malicious JavaScript code. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with an affected versio...
Adobe Flash Player Domain Policy Bypass (APSB15-10: CVE-2015-3079)
Adobe Flash Player is vulnerable to a cross domain policy bypass. If the victim opens a maliciously crafted file using certain URL schemes, the file could cause a privilege escalation and allow unlimited cross-domain access...
Adobe Flash Player Memory Corruption (APSB15-09: CVE-2015-3078)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted mp4 file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted mp4 file...
TLS and SSL Diffie-Hellman Key Downgrade Weakness (CVE-2015-1716; CVE-2015-4000)
A vulnerability has been detected in the way TLS protocol handles weak, legacy cipher suites. An attacker might leverage this vulnerability to intercept secure communications...
ACE Files
ACE is a data compression format used for archiving, which consists of blocks of various types and sizes. An attacker may use the compressed ACE format in order to bypass inspection by network security devices, which will not be able to inspect the original content that is being transferred...
Microsoft Windows File and Directory Name Command Injection (MS12-048) - Ver2 (CVE-2012-0175)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows handles specially crafted file and directory names. A remote attacker can exploit this issue by enticing a user to open a file or a directory with a specially...
IBM Tivoli Directory Server Integer Overrun Buffer Overflow - Ver2 (CVE-2011-1206)
A buffer overflow vulnerability has been reported in IBM Tivoli Directory Server. An attacker could exploit this vulnerability via a crafted LDAP request. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Microsoft Office Excel CatSerRange Record Remote Code Execution (MS11-021) - Ver2 (CVE-2011-0978)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Ca eTrust PestPatrol Antispyware ActiveX Buffer Overflow106 - Ver2 (CVE-2009-4225)
A buffer overflow vulnerability has been reported in Ca Etrust Pestpatrole Ppctl.dll Activex and Computer Associates eTrust PestPatrol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Internet Explorer HTML Time Element Memory Corruption (MS10-090) - Ver2 (CVE-2010-3346)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...
Cisco Secure ACS EAPTLS Authentication Bypass - Ver2 (CVE-2004-1099)
An authentication bypass vulnerability has been reported in Cisco Secure Access Control Server Solution Engine, Cisco Secure ACS Solution Engine and Cisco Secure Access Control Server Solution Engine. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized...
Apache Qpid Session.gap Denial of Service - Ver2 (CVE-2015-0203)
A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...
Novell GroupWise Internet Agent iCalendar Parsing Denial of Service - Ver2 (CVE-2011-3827)
A denial-of-service vulnerability has been reported in Novell GroupWise Internet Agent. The vulnerability is due to insufficient validation of certain data when parsing a received iCalendar message. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted...
Microsoft Windows GDI+ WMF Parsing Buffer Overflow (MS08-052) - Ver2 (CVE-2008-3014)
Windows Metafile WMF is a 16-bit metafile image format optimized for the Windows operating system that can contain both vector information and bitmap information. A remote code execution vulnerability has been discovered in the way GDI+ allocates memory for WMF image files. The vulnerability is d...
Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052) - Ver2 (CVE-2008-3013)
Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...
Microsoft PowerPoint OfficeArt Atom Remote Code Execution (MS11-022) - Ver2 (CVE-2011-0976)
A remote code execution vulnerability has been identified in Microsoft PowerPoint. Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability...
Microsoft Office Long HTML Link Processing Buffer Overflow - Ver2 (CVE-2004-0848)
A buffer overflow vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
ISS ICQ Parsing - Ver2 (CVE-2004-0362)
There is a vulnerability within several ISS security products, including BlackICE, RealSecure, and Proventia, in the way they parse the ICQ messaging protocol. An attacker, exploiting this vulnerability, can cause a buffer overflow, resulting in the termination of a service or execution of...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3871) - Ver2
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Excel File Format Code Execution (MS12-030) - Ver2 (CVE-2012-0141)
A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Exc...
MySQL Malformed Password Authentication - Ver2 (CVE-2004-0627)
MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol in addition to...
HP Intelligent Management Center img Buffer Overflow - Ver2 (CVE-2011-1848)
HP Intelligent Management Center IMC is a stand-alone, comprehensive management platform developed by HP that delivers integrated and modular network management capabilities. IMC Enterprise Edition is designed on a service-oriented architecture SOA using a business application flow model as the...
Oracle 9i HTTP Server mod_plsql Directory Traversal - Ver2 (CVE-2001-1217)
A directory traversal vulnerability has been reported in Oracle Application Server. An attacker could exploit this vulnerability via a double encoded URL with "..". Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Linksys WRH54G HTTP Management Interface DoS Code Execution - Ver2 (CVE-2008-2636)
A code execution vulnerability has been reported in Cisco Linksys Wrh54g Router. An attacker could exploit this vulnerability via a URI that begins with a ". Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Table Layout Memory Corruption - Ver2 (CVE-2008-2258)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a memory corruption in the way Internet Explorer handles HTML tables. Remote attackers can entice target users to visit a malicious web page via a vulnerable version of the Internet...
VMware ESX and ESXi Server SOAP Request Handling Denial Of Service - Ver2 (CVE-2012-5703)
A denial of service vulnerability exists in VMware ESX and ESXi server. The vulnerability is due to improper handling of certain SOAP requests in the vSphere API. A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted messages to the affected server...
Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing - Ver2 (CVE-2010-0032)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...