13538 matches found
Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8456)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8446)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Buffer Overflow (APSB14-28: CVE-2014-8457)
A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat And Reader Use-After-Free (APSB14-28: CVE-2014-8455)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Acrobat And Reader Use-After-Free (APSB14-28: CVE-2014-9165)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file. Successful exploitatio...
GD Graphics Library PNG Buffer Overflow (CVE-2004-0941)
There is a vulnerability in the way GD Graphics Library parses PNG image files. A malicious file with specially crafted fields can trigger a heap-based buffer overflow. An attacker can exploit this vulnerability to create a denial of service condition or execute arbitrary code...
Web Clients Cookie Arbitrary Website Redirection
An unsolicited redirection vulnerability has been reported. The vulnerability is due to a design flaw which allows attackers to redirect users to arbitrary websites...
Microsoft Windows Media Player ASX Playlist Parsing Buffer Overflow - ver 2 (CVE-2006-6134)
A buffer overflow vulnerability has been reported in Microsoft Windows Media Player. The vulnerability is due to a buffer overflow error when processing malformed ASX file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Flash Player Improper File Validation (APSB15-01: CVE-2015-0301)
An improper file validation issue has been reported in Adobe Flash Player. The vulnerability occurs when the Flash Broker application allows malicious dlls or exes files to be written to one of the whitelisted directories. such a malicious dll dropped in these directories could be used to deliver...
Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8448)
An information disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an error in the way Adobe Reader handles specially crafted PDF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...
Netscape NSS Library Record Parsing Buffer Overflow (CVE-2004-0826)
A vulnerability exists in Netscape Network Security Services NSS library's SSLv2 message parsing routines...
Multiple Web Servers Archived Link Information Disclosure
An information disclosure vulnerability has been reported in some Linux servers. By uploading a specially crafted compressed archive file a remote attacker may leverage this vulnerability to gain access to sensitive information. Successful exploitation will allow the attacker to gain access to...
OpenSSL Ephemeral ECDH Cipher Suite Handshake Downgrade (CVE-2014-3572)
A vulnerability has been detected in the way OpenSSL handles TLS handshakes involving certain cipher suites. An attacker might leverage this vulnerability to impersonate a server and intercept secure communications...
WordPress VideoWhisper Live Streaming Integration Plugin Unrestricted File Upload (CVE-2014-1905)
An unauthorized file upload vulnerability has been reported in VideoWhisper Live Streaming Integration plugin for WordPress. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could...
Magnitude Exploit Kit Landing Page
Magnitude exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Magnitude exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code...
Astrum Exploit Kit Landing Page
Astrum exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Astrum exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...
Angler Exploit Kit Landing Page URL
Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...
Angler Exploit Kit Landing Page - Ver 2
Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...
Angler Exploit Kit Landing Page
Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...
Creative Software AutoUpdate Engine CTSUEng.ocx ActiveX Control Buffer Overflow (CVE-2008-0955)
A remote code execution vulnerability has been reported inCreative Software AutoUpdate Engine. The vulnerability is due to boundary errors within the AutoUpdate Engine ActiveX control CTSUEng.ocx. A remote attacker can exploit this vulnerability by enticing a user to open a malicious web page...
Sweet Orange Exploit Kit Landing Page
Sweet Orange exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Sweet Orange exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code...
Gondad Exploit Kit Landing Page
Gondad exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Gondad exploit kit by enticing them to visit a malicious web page. Successful infection will compromise the security of all data on the victim's...
Wordpress Ajax Store Locator Arbitrary File Download
An arbitrary file download vulnerability exists in Wordpress Ajax Store Locator. The vulnerability is due to a parameter arriving from user input, which is not properly sanitized. A remote attacker might gain access to arbitrary files using a specially crafted request...
WordPress Symposium Plugin Unauthenticated Shell Upload (CVE-2014-10021)
WordPress Symposium plugin allows user to upload files without proper validation of file type. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system...
Adobe Flash Player Memory Corruption (APSB14-27: CVE-2014-0587)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
ManageEngine NetFlow Analyzer And IT360 Multiple servlets Arbitrary File Download (CVE-2014-5445)
An arbitrary file download vulnerability exists in ManageEngine Netflow Analyzer and IT360. The vulnerability is due to lack of authentication and insufficient input validation of the schFilePath parameter sent to servlets in HTTP requests. A remote unauthenticated attacker can download arbitrary...
ActualScripts ActualAnalyzer Cookie Command Execution
A command execution vulnerability exists in ActualAnalyzer. The vulnerability is due to insufficient input validation when handling cookie values. A remote unauthenticated attacker can exploit this vulnerability by sending an HTTP request with a crafted cookie value. Successful exploitation could...
Adobe Acrobat and Reader Stack Buffer Overflow (APSB13-02: CVE-2013-0610)
A stack overflow vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error in Adobe Acrobat and Reader while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Advantech ADAMView Display Properties Parameter Remote Code Execution (CVE-2014-8386)
A remote code execution vulnerability has been reported in Advantech ADAMView. The vulnerability is due to insufficient validation of display properties from a file. A remote attacker can exploit this vulnerability by enticing a user to download and process a maliciously crafted file...
Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-8441)
A memory corruption vulnerability has been reported in Adobe Flash Player. Successful exploitation of this vulnerability may allow the attacker to access unmapped memory on the target system...
Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow - ver 2 (CVE-2014-8388)
A stack buffer overflow exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of the ipaddress parameter contained in the webeye.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this...
SIP Display Field CrossSite Scripting - Ver2 (CVE-2007-2191)
A cross-site scripting vulnerability has been reported in Freepbx. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Microsoft WINS Service Memory Overwrite Buffer Overflow - Ver2 (CVE-2004-0567)
A buffer overflow vulnerability has been reported in Microsoft Windows Server 2003, Microsoft Windows 2000 and Microsoft Windows NT. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Internet Explorer RDSDataControlURL DoS - Ver2 (CVE-2006-3510)
A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - Ver2 (CVE-2011-4259)
A memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. An attacker could exploit this vulnerability by enticing a target user to open a...
Advantech WebAccess HMI and SCADA Software CrossSite Scripting - Ver2 (CVE-2012-0233)
A cross-site scripting vulnerability has been reported in Advantech Webaccess. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Microsoft Excel Obj BIFF Record Boundary Access (MS11-045) - Ver2 (CVE-2011-1272)
Microsoft Excel is a popular spreadsheet application. A vulnerability has been identified in Microsoft Excel. A remote attacker could exploit this issue via a malformed Excel file. A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. ...
Microsoft IIS URL Access Violation DoS - Ver2 (CVE-2002-0072)
A denial-of-service vulnerability has been reported in Microsoft IIS. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution - Ver2 (CVE-2011-3322)
A remote stack overflow vulnerability has been reported in Procyon Core Server HMI service. The vulnerability is due to a boundary check error. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Successful exploitation could allow an attacker to...
PhpBook mail Parameter PHP Code Execution - Ver2 (CVE-2006-0075)
A code execution vulnerability has been reported in GNU phpBook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Internet Explorer JPEG Processing DoS - Ver2 (CVE-2005-2308)
A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Firefox Protocol Handler Code Execution - Ver2 (CVE-2007-3845)
A code execution vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla SeaMonkey. An attacker could exploit this vulnerability via certain vectors associated with launching a file handling program based on the file extension at the end of the URI a variant of...
Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007) - Ver2 (CVE-2003-0109)
The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. Several Microsoft Windows IIS servers support the World Wide Web Distributed Authoring and Versioning WebDAV...
LCDProc test_func_func Format String Code Execution - Ver2 (CVE-2004-1917)
A code execution vulnerability has been reported in Lcdproc. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
DameWare Mini Remote Control Service Username Overflow Buffer Overflow - Ver2 (CVE-2005-2842)
A buffer overflow vulnerability has been reported in Dameware Development Mini Remote Control Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Internet Explorer Object Tag Temporary File Information Disclosure - Ver2 (CVE-2002-1188)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. An attacker could exploit this vulnerability via certain uses of the OBJECT tag, which are not subjected to the proper security checks. Successful exploitation of this vulnerability would allow a remote...
Symantec Workspace Streaming XML-RPC Arbitrary File Upload - Ver2 (CVE-2014-1649)
An arbitrary file upload vulnerability has been reported in Symantec Workspace. The vulnerability is due to lack of access control validation in the functionality used to process XMLRPC requests. A remote unauthenticated attacker could exploit this vulnerability by a sending specially crafted...
Microsoft IIS idq.dll IDAIDQ ISAPI Overflow Buffer Overflow - Ver2 (CVE-2001-0500)
A buffer overflow vulnerability has been reported in Microsoft IIS, Microsoft Inbex Server and Microsoft Indexing Service. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Asterisk chan_iax2 IAX2 Control Frame LAGR Denial of Service - Ver2 (CVE-2007-3763)
A denial-of-service vulnerability has been reported in Asterisk AsteriskNOW, Asterisk Appliance Developer Kit and Asterisk S800i Appliance. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
HP Data Protector Opcode 45 and 46 Code Execution - Ver2 (CVE-2013-2348)
Multiple vulnerabilities have been reported in HP Data Protector. Both vulnerabilities are due to insufficient input validation on a string supplied with a message containing opcodes 45 or 46. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...