PHP Core Unserialize Key Name Code Execution - Ver2 (CVE-2015-0231)

A code execution vulnerability has been reported in PHP core. The vulnerability is due to a use after free error when handling serialized objects with identical number key names within the unserialize function. An attacker could exploit this vulnerability by sending crafted serialized data to a w...

VLC Media Player XSPF Playlist Integer Overflow - Ver2 (CVE-2011-2194)

An integer overflow vulnerability has been reported in VideoLAN VLC Media Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HP OpenView Network Node Manager Accept-Language Buffer Overflow - Ver2 (CVE-2009-4179)

A stack buffer overflow exists in HP OpenView Network Node Manager NNM CGI program ovalarm.exe. The vulnerability is due to a boundary error when processing the Accept-Language HTTP header and the OvAcceptLang cookie value in a crafted HTTP request. A remote unauthenticated attacker can exploit...

Adobe Reader Javascript API Information Disclosure (APSB14-15) - Ver2 (CVE-2014-0521)

An Information Disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an error in the way Adobe Reader handles specially crafted PDF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...

Novell GroupWise Internet Agent iCalendar Parsing Denial of Service - Ver2 (CVE-2011-3827)

A denial-of-service vulnerability has been reported in Novell GroupWise Internet Agent. The vulnerability is due to insufficient validation of certain data when parsing a received iCalendar message. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted...

Microsoft Windows NT 4.0 DHCP Server Request Buffer Overflow attack - Ver2 (CVE-2004-0900)

A buffer overflow vulnerability has been reported in Microsoft Windows NT. An attacker could exploit this vulnerability via a malformed DHCP message. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application...

Nfsutils TCP Connection Termination Denial of Service attack - Ver2 (CVE-2004-1014)

A denial-of-service vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Windows DNS Server Spoofing - Ver2 (CVE-2007-3898)

There exits a vulnerability in Microsoft Windows DNS Server. The flaw is caused by predictable transaction identifiers in DNS requests generated. A remote attacker may leverage this vulnerability to use spoofed DNS responses to poison the DNS cache on the target system...

Wordpress Simple Ads Manager Arbitrary File Upload - Ver2 (CVE-2015-2825)

Unrestricted file upload vulnerability has been reported in Simple Ads Manager plugin for WordPress. Successful exploitation of this vulnerability would allow remote attackers to execute code in the server...

Microsoft Internet Explorer HTML Time Element Memory Corruption (MS10-090) - Ver2 (CVE-2010-3346)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...

CoolPDF Reader Image Stream Processing Buffer Overflow - Ver2 (CVE-2012-4914)

A buffer overflow vulnerability has been reported in CoolPDF Reader. The vulnerability is due to insufficient validation of streams while processing PDF files. An attacker could exploit this vulnerability by enticing an unsuspecting user to download and process a specially crafted PDF file, which...

Microsoft Internet Explorer MHTML Content Blocks Information Disclosure - Ver2 (CVE-2011-0096)

MHTML MIME Encapsulation of Aggregate HTML is an Internet standard that defines the MIME structure that is used to wrap HTML content. An information disclosure vulnerability has been reported in Microsoft Windows MHTML protocol. The vulnerability is due to the way MHTML interprets MIME-formatted...

Adobe Acrobat getAnnots Remote Code Execution - Ver2 (CVE-2009-1492)

A code execution vulnerability has been reported in Adobe Acrobat and Adobe Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing - Ver2 (CVE-2010-0032)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...

Microsoft Excel File Format Code Execution (MS12-030) - Ver2 (CVE-2012-0141)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Exc...

Microsoft Windows TrueType Font File Parsing Code Execution - Ver2 (CVE-2011-3402)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper bounds checking when parsing specially crafted TrueType Font TTF files. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted TTF...

Microsoft Office Excel CatSerRange Record Remote Code Execution (MS11-021) - Ver2 (CVE-2011-0978)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

IBM Informix Client NFX Buffer Overflow - Ver2 (CVE-2009-3691)

A buffer overflow vulnerability has been reported in IBM Informix Client Software Development Kit and Ibm Informix Connect Runtime. An attacker could exploit this vulnerability via a .nfx file with a crafted HostSize, and possibly ProtoSize and ServerSize, field that triggers a stack-based buffer...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

Oracle Secure Backup Administration property_box.php Command Injection - Ver2 (CVE-2010-0899)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allows for single point of management of data present on network attached storage NAS devices and distributed hosts which may have different operating systems. The data in transit is kept secure ...

Microsoft Excel Malformed Chart Sheet Substream Memory Corruption (MS10-038) - Ver2 (CVE-2010-0823)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

ISS ICQ Parsing - Ver2 (CVE-2004-0362)

There is a vulnerability within several ISS security products, including BlackICE, RealSecure, and Proventia, in the way they parse the ICQ messaging protocol. An attacker, exploiting this vulnerability, can cause a buffer overflow, resulting in the termination of a service or execution of...

Apache Qpid Session.gap Denial of Service - Ver2 (CVE-2015-0203)

A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...

Microsoft Internet Explorer Deleted Object Code Execution (MS13-037) - Ver2 (CVE-2013-1312)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Adobe Acrobat PDF File Array Type Error Memory Corruption (APSB12-16) - Ver2 (CVE-2012-4147)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to memory corruption while handling specially crafted PDF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file with an affected versi...

Norton Internet Security NBNS Response Processing Stack Overflow - Ver2 (CVE-2004-0444)

Norton Internet Security is a security solution produced by Symantec corporation. If the Firewall component allows traffic on port 137/UDP, this traffic will be parsed as NetBIOS Name Service messages. There exists a vulnerability in the Symantec Firewall product line. A specially crafted NetBIOS...

HP Intelligent Management Center img Buffer Overflow - Ver2 (CVE-2011-1848)

HP Intelligent Management Center IMC is a stand-alone, comprehensive management platform developed by HP that delivers integrated and modular network management capabilities. IMC Enterprise Edition is designed on a service-oriented architecture SOA using a business application flow model as the...

VMware OVF Tool Format String - Ver2 (CVE-2012-3569)

A format string vulnerability has been reported in VMware OVF Tool.The vulnerability is caused by insufficient sanitization when processing OVF files.A remote attacker can exploit this vulnerability to execute arbitrary code in the security context of the current user...

Microsoft Internet Explorer HTTP Response Double Free Memory Corruption (MS08-045) - Ver2 (CVE-2008-2256)

Microsoft Internet Explorer is the most widely used Internet browser. . A remote code execution vulnerability was reported in the way Microsoft Internet Explorer accesses an object that has not been correctly initialized or that has been deleted. By convincing a user to visit a specially crafted...

Microsoft Internet Explorer Table Layout Memory Corruption - Ver2 (CVE-2008-2258)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a memory corruption in the way Internet Explorer handles HTML tables. Remote attackers can entice target users to visit a malicious web page via a vulnerable version of the Internet...

Monkey HTTPD Server Denial of Service - Ver2 (CVE-2013-3724)

A denial of service vulnerability has been reported in Monkey HTTPD Server. The vulnerability is due to improper bounds checking while parsing headers. A remote attacker can exploit this vulnerability by sending a malicious request to the target server. Successful exploitation of this vulnerabili...

Ca eTrust PestPatrol Antispyware ActiveX Buffer Overflow106 - Ver2 (CVE-2009-4225)

A buffer overflow vulnerability has been reported in Ca Etrust Pestpatrole Ppctl.dll Activex and Computer Associates eTrust PestPatrol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

PHP Core unserialize process nested data Use After Free - Ver2 (CVE-2014-8142)

A use-after-free vulnerability has been reported in PHP core. The vulnerability is due to a use after free error when handling serialized objects with identical keys within the unserialize function. An attacker could exploit this vulnerability by sending crafted serialized data to a web applicati...

Oracle 9i HTTP Server mod_plsql Directory Traversal - Ver2 (CVE-2001-1217)

A directory traversal vulnerability has been reported in Oracle Application Server. An attacker could exploit this vulnerability via a double encoded URL with "..". Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Adobe Acrobat And Reader Heap-based memory corruption (APSB15-10: CVE-2015-3051)

A Heap based memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error occurring when a font object containing a negative value being passed to callother operator, causing an integer overflow. A remote attacker can exploit this vulnerability by...

ScadaTEC ScadaPhone and ModbusTagServer SCADA Remote Code Execution - Ver2 (CVE-2011-4535)

A stack buffer overflow vulnerability has been reported in ScadaTEC ScadaPhone and ModbusTagServer. The vulnerability is due to a boundary check error. A remote attacker can exploit this issue by enticing a victim to open a specially crafted ZIP archive file with the affected product. Successful...

Microsoft Windows AVI File Data Validation Integer Overflow (MS09-038) - Ver2 (CVE-2009-1546)

Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF.This file type used with applications that capture, edit, and play back audio-video sequences. The vulnerability is due to an error in the Windows component responsible for processing AVI files that does not...

MySQL Malformed Password Authentication - Ver2 (CVE-2004-0627)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol in addition to...

Multiple AntiVirus Products ZIP File Scan Evasion Security Bypass - Ver2 (CVE-2012-1462)

A security bypass vulnerability has been reported in multiple products. An attacker could exploit this vulnerability via a ZIP file containing an invalid block of data at the beginning. Successful exploitation of this vulnerability would allow remote attackers to bypass malware protection and...

Mozilla Browser Non-ASCII Hostname Heap Overflow - Ver2 (CVE-2004-0902)

Mozilla and Firefox are popular open-source web browsers produced by the Mozilla Foundation. Thunderbird is an e-mail client produced by the Mozilla Foundation. Netscape is a web browser produced by Netscape Communication Corp. These products are all based on the Gecko browser engine. A...

CCProxy Telnet Ping Hostname Buffer Overflow - Ver2 (CVE-2004-2416)

A buffer overflow vulnerability has been reported in Youngzsoft Ccproxy. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052) - Ver2 (CVE-2008-3013)

Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...

Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076) - Ver2 (CVE-2012-1885)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to a memory allocation error. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Excel file with an affected version of Microsoft Excel. Successful...

Linksys WRH54G HTTP Management Interface DoS Code Execution - Ver2 (CVE-2008-2636)

A code execution vulnerability has been reported in Cisco Linksys Wrh54g Router. An attacker could exploit this vulnerability via a URI that begins with a ". Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3871) - Ver2

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

VMware ESX and ESXi Server SOAP Request Handling Denial Of Service - Ver2 (CVE-2012-5703)

A denial of service vulnerability exists in VMware ESX and ESXi server. The vulnerability is due to improper handling of certain SOAP requests in the vSphere API. A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted messages to the affected server...

Microsoft Graphics Filters CGM Image Converter Buffer Overrun (MS10-105) - Ver2 (CVE-2010-3945)

Computer Graphics Metafile CGM is a free and open international standard file format for 2D vector graphics, raster graphics, and text. A remote code execution vulnerability has been discovered in the way that Microsoft Office allocates buffer size when handling CGM image files. The vulnerability...

Multiple Vendor TCP Timestamp Option Denial of Service attack - Ver2 (CVE-2005-0356)

A denial-of-service vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

PhpMyAdmin preg_replace Function Code Injection - Ver2 (CVE-2013-3238)

A vulnerability has been reported in phpMyAdmin, a web-based administration console for MySQL servers. The vulnerability is due to an input validation error when handling queries of the types replaceprefixtbl or copytblchangeprefix to dbstructure.php. A remote, authenticated attacker could exploi...

Asterisk chan_skinny CAPABILITIES_RES_MESSAGE Denial of Service - Ver2 (CVE-2007-4280)

A denial of service vulnerability has been reported in Digium Asterisk. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...