Microsoft Office Invalid Pointer Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6335)

A remote code execution vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word fil...

BitDefender Antivirus Logging Function Format String - Ver2 (CVE-2005-3154)

The SOFTWIN BitDefender Antivirus AV product is an anti-virus scanner capable of on-demand as well as email scanning operations. The AV scanner logs by default all results of scans that it performs on the host machine. The logs include positive as well negative virus pattern matches. There exists...

SOAPUI Remote Code Execution - Ver2 (CVE-2014-1202)

A code execution vulnerability has been reported in Eviware SoapUI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Schannel Remote Code Execution - Ver2 (CVE-2014-6321)

A code execution vulnerability has been reported in Secure Channel Schannel security package. An attacker could exploit this vulnerability by sending specially crafted packets to a Windows server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

Drupal Core XML-RPC Endpoint xmlrpc.php Internal Entity Expansion Denial of Service - Ver2 (CVE-2014-5265)

A denial of service vulnerability has been reported in Drupal Core. This can cause a very high CPU load and memory exhaustion. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service on the vulnerable system...

Microsoft Office Bad Index Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6334)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...

Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow - Ver2 (CVE-2010-3974)

A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...

Microsoft RPCSS Denial of Service RPCSYSAC badUNClen - Ver2 (CVE-2004-0116)

A denial-of-service vulnerability has been reported in Microsoft Windows XP, Microsoft Windows 2000 and Microsoft Windows Server 2003. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Apache HTTP Server mod_rewrite RewriteLog Command Execution - Ver2 (CVE-2013-1862)

A command execution vulnerability has been reported in Apache HTTP web server modrewrite. The vulnerability is due to a lack of input validation in handling certain escape sequences when writing to the log file. A remote attacker can exploit these vulnerabilities by sending a specially crafted HT...

CUPS Malformed Traversal HTTP Request DOS - Ver2 (CVE-2005-2874)

A denial-of-service vulnerability has been reported in Easy Software Products Cups. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Windows Graphics Rendering Engine Buffer Overflow (MS04-032) - Ver2 (CVE-2004-0209)

The Microsoft Windows Metafile Format WMF is used to store pictures and other graphical renderings as either vector or bitmap-format graphical data. The vector data stored in WMF files is described as Microsoft Windows Graphics Device Interface GDI commands. The WMF format is the original 16-bit...

WebGate WESPSDK WESPDiscovery Stack Buffer Overflow (CVE-2015-2100)

A code execution vulnerability exists in WebGate WESPSDK that is shipped with multiple WebGate products. The vulnerability is due to a stack buffer overflow in the TCPDiscovery and TCPDiscovery2 methods of the WESPDiscovery.WESPDiscoveryCtrl ActiveX control. A remote attacker could exploit this...

Ingres Database Communications Server Component Heap Buffer Overflow - Ver2 (CVE-2007-3334)

Ingres developed a relational database product named Ingres Database. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors such as Computer Associates CA. A heap buffer overflow vulnerability exists in Ingres Database...

Microsoft Browser Embedded Media Player Memory Corruption (MS10-082) - Ver2 (CVE-2010-2745)

Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in the Windows Media Player that improperly...

Internet Explorer HTML Tag Memory Corruption (MS06-013) - Ver2 (CVE-2006-1188)

Microsoft Internet Explorer IE is the most widely used web browser application today. The browser is capable of processing HTML, scripting languages, and interpretation of various other popular Internet specifications. There are numerous versions of the HTML standard that are interpreted by the...

Oracle Demantra 1221 Arbitrary File Disclosure - Ver2 (CVE-2013-5877)

An information disclosure vulnerability has been reported in Oracle Supply Chain Products Suite. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Oracle Web Cache Admin Module Multiple GET Request Method DoS - Ver2 (CVE-2002-0386)

A denial-of-service vulnerability has been reported in Oracle Application Server. An attacker could exploit this vulnerability via an HTTP GET request containing a ". Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affecte...

Microsoft Winhlp32 Compressed Phrase Buffer Overflow attack - Ver2 (CVE-2004-1306)

A buffer overflow vulnerability has been reported in Microsoft Windows XP, Microsoft Windows 2000, Microsoft Windows NT and Microsoft Windows Server 2003. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...

ILife Photocast XML Title Format String Code Execution - Ver2 (CVE-2007-0051)

A code execution vulnerability has been reported in Apple iPhoto. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle HTTP Server Cross-Site Scripting - Ver2 (CVE-2004-2115)

A cross-site scripting vulnerability has been reported in Oracle HTTP Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVSTrac FileDiff v2 Parameter Command Execution - Ver2 (CVE-2004-1456)

A command execution vulnerability has been reported in CVSTrac. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

SAP Internet Transaction Server Information Disclosure - Ver2 (CVE-2003-0747)

An information disclosure vulnerability has been reported in Sap Internet Transaction Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Nullsoft Shoutcast Server Request Log CrossSite Scripting - Ver2 (CVE-2007-1229)

A cross-site scripting vulnerability has been reported in Nullsoft Shoutcast Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

SQL Servers Unauthorized Commands SQL Injection - Ver2 (CVE-2014-3704)

SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. SQL injection techniques can be used by attackers to exploit the Drupal vulnerability. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or...

Interactive Data eSignal Listener Buffer Overflow - Ver2 (CVE-2004-1868)

eSignal is a real-time market data and support tool provided by Interactive Data Corporation. The product supplies financial market data and more for traders over the internet. To facilitate the receipt of incoming data, eSignal opens a local, listening socket on TCP Port 80. There exists a buffe...

Ultra Mini HTTPD Resource Name Request Handling Stack Buffer Overflow - Ver2 (CVE-2013-5019)

A buffer overflow vulnerability has been reported in Vector Ultra Mini HTTPD. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Internet Explorer Data Binding Memory Corruption - Ver2 (CVE-2008-4844)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft SQL Server TDS Packet Fragment Handling Buffer Overflow - Ver2 (CVE-2004-1560)

A buffer overflow vulnerability has been reported in Microsoft SQLServer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Voodoo Chat index.php file_path Parameter PHP Code Execution - Ver2 (CVE-2006-3991)

A code execution vulnerability has been reported in Voc-project Voodoo Chat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

VS News System show_news_inc.php newsordner Parameter PHP Code Execution - Ver2 (CVE-2007-1017)

A code execution vulnerability has been reported in Virtualsystem Vs-news-system. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Rphp zf_path Parameter PHP Code Execution - Ver2 (CVE-2007-1010)

A code execution vulnerability has been reported in Zebrafeeds. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sami HTTP Server GET Request Denial of Service - Ver2 (CVE-2007-0548)

A denial-of-service vulnerability has been reported in Karjasoft Sami HTTP Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

LupperA XMLRPC Propagation Request Code Execution - Ver2 (CVE-2005-1921)

A code execution vulnerability has been reported in Pear XML RPC. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Reader JavaScript printSeps Function Heap Corruption (APSB10-28) - Ver2 (CVE-2010-4091)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A heap corruption vulnerability exits in the way Adobe Acrobat and Reader handle specially craft...

Colloquy IRC Channel Invite Format String Denial of Service - Ver2 (CVE-2007-0344)

A denial-of-service vulnerability has been reported in Colloquy. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - Ver2 (CVE-2001-0241)

A buffer overflow in this extension IIS 5.0 can permit remote attackers to execute arbitrary code on the web server with the same privileges as the web server. The ISAPI .printer extension permits the submitting and controlling of print jobs over HTTP. There exists an unchecked buffer in the Host...

Microsoft Office RTF Stack Buffer Overflow (MS10-087) - Ver2 (CVE-2010-3333)

RTF provides a format for text and graphics interchange that can be used with different operating systems. A buffer overflow vulnerability has been identified in the way Microsoft Office parses Rich Text Format RTF files. . The vulnerability is due to an error in Microsoft Office that fails to...

Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007) - Ver2 (CVE-2012-0007)

An information disclosure vulnerability has been reported in the Microsoft Anti-Cross Site Scripting AntiXSS Library. The vulnerability is due to the way the AntiXSS Library incorrectly evaluates certain characters after a CSS escaped character is detected. A remote attacker may exploit this issu...

Knet Web Server HTTP Request Denial of Service - Ver2 (CVE-2005-0575)

A denial-of-service vulnerability has been reported in Stormy Studios Knet. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

GrapAgenda index.php page Parameter PHP Code Execution - Ver2 (CVE-2006-4610)

A code execution vulnerability has been reported in Graphiks Grapagenda. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Internet Explorer HTML Help Remote Code Execution (MS05-001) - Ver2 (CVE-2004-1043)

Microsoft Internet Explorer executes with the concept of security zones, which enables the browser to apply different security policies based on the origin of the file that is being rendered. For instance, separate restrictions may be set for remote content and for local content. As a rule,...

HD Soft Windows FTP Server Username Format String attack Code Execution - Ver2 (CVE-2004-0069)

A code execution vulnerability has been reported in Hd Soft Windows FTP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)

The Microsoft Internet Explorer application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. This application has a built in functionality to interpret JavaScript and VBScript code. It is also capable of using the Document...

MySQL and MariaDB Incorrect Cast Policy Bypass - Ver2 (CVE-2012-2122)

An incorrect cast has been reported in MySQL and MariaDB. The vulnerability is due to the reliance on memcpy returning a value between -128 and 127. A remote, unauthenticated attacker can exploit this vulnerability by repeatedly trying to connect to the affected database service...

Anzeigenmarkt 2011 index.php q Parameter SQL Injection - Ver2 (CVE-2011-1667)

An SQL injection vulnerability has been reported in Xmedien Anzeigenmarkt. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft IIS HTR Request Buffer Overflow - Ver2 (CVE-2002-0071)

...

Mozilla Firefox nsTreeRange Use After Free - Ver2 (CVE-2011-0073)

A use-after-free vulnerability has been reported in Mozilla Firefox. The vulnerability is due to an error while handling user-defined functions in JavaScript JS files. A remote attacker may exploit this vulnerability by enticing users to open a specially crafted web-page using an affected version...

HPUX LPD Metacharacter Command Execution - Ver2 (CVE-2005-3277)

A command execution vulnerability has been reported in HP-UX family of operating systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...