13538 matches found
Microsoft Windows PPTP Service Buffer Overflow - Ver2 (CVE-2002-1214)
A buffer overflow vulnerability has been reported in Microsoft Windows XP, Microsoft Windows 2000 and Microsoft Windows 2000 Terminal Services. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Belkin Linksys WRT110 Remote Command Execution - Ver2 (CVE-2013-3568)
A remote command execution vulnerability has been reported in Belkin Linksys WRT110 firmware. The vulnerability is due to the Web interface's failure to sanitize ping targets as well as a lack of CSRF tokens. A remote attacker could exploit this vulnerability by sending a malicious HTTP request t...
RDesktop process_redirect_pdu BSS Overflow Buffer Overflow - Ver2 (CVE-2008-1802)
A buffer overflow vulnerability has been reported in Rdesktop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Linux Kernel SMB Filesystem smb_receive Transaction2 - Ver2 (CVE-2004-0949)
Multiple vulnerabilities have been reported in the smbrecvtrans2 function call in the samba filesystem smbfs in Linux kernel 2.4 and 2.6. Successful exploitation of this vulnerability could allow a remote attacker to read arbitrary kernel information or raise a counter value to an arbitrary numbe...
MostGear Soft EasyLan Folder Share 320100 Activation Denial of Service - Ver2 (CVE-2013-6079)
A denial-of-service vulnerability has been reported in Mostgear Easy Lan Folder Share. An attacker could exploit this vulnerability via a long string in the registration code field in the activate license window or the HKLMSOFTWAREMostGearEasyLanFolderShareV1License registry key. Successful...
ActiveBar ActiveX Method Arbitrary File Write - Ver2 (CVE-2007-3883)
An Overwrite Files vulnerability has been reported in The Data Dynamics ActiveBar ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to create or overwrite files via a full pathname in the second argument to the Save method, or the first argument to the...
Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow - Ver2 (CVE-2013-0003)
A buffer overflow exists in the System.DirectoryServices.Protocols S.DS.P namespace method in the .NET framework. The vulnerability is due to an error in the validation of the size of objects in memory prior to copying them into an array.An attacker can remotely exploit this vulnerability by...
Microsoft Windows Agent ACF File Handling Memory Corruption (MS06-068) - Ver2 (CVE-2006-3445)
A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier and more natural. . The vulnerability is due to a memory corruption error in the...
Apple QuickTime PictureViewer GIF Rendering Integer Overflow - Ver2 (CVE-2005-1106)
An integer overflow vulnerability has been reported in Apple QuickTime PictureViewer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CA ARCserve Backup DB Engine Denial of Service - Ver2 (CVE-2008-4399)
CA ARCserve Backup products offer data protection for distributed servers, clients,databases and applications. They provide centralized control over a series of distributed operationsincluding Backup and Restore, Data Migration, and Threat Management. There exists a denial of service vulnerabilit...
VLC udp Handler Format String Code Execution - Ver2 (CVE-2007-0017)
A code execution vulnerability has been reported in VideoLAN VLC Media Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows WebDav Mini-Redirector Heap Buffer Overflow (MS08-007) - Ver2 (CVE-2008-0080)
Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allows allow clients to publish, lock, and manage resources on the Web. . The vulnerability is due to an error in the Microsoft Windows WebDAV Mini-Redirector that fails to properly handle malformed WebDAV...
Apple QuickTime Text Track Descriptors Heap Buffer Overflow - Ver2 (CVE-2012-0664)
A heap buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to improper validation of parameters lengths. A remote attacker can exploit this vulnerability by enticing a victim to open a specially crafted QuickTime Text file with an affected version of...
Microsoft Windows SSL Library Private Communications Transport Buffer Overflow - Ver2 (CVE-2003-0719)
A buffer overflow vulnerability has been reported in Microsoft Windows SSL Library. The vulnerability is due to the processing of certain messages. A remote attacker can exploit this issue by executing arbitrary code in the context of a local system user when SSL is enabled...
Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)
A file inclusion vulnerability has been reported in Joomla Webring Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache 2 mod_ssl Connection Abort Denial of Service possible attack - Ver2 (CVE-2004-0748)
A denial-of-service vulnerability has been reported in Apache Software Foundation Apache HTTP Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Internet Explorer Mouse Leave Event Handler Memory Corruption (MS10-018) - Ver2 (CVE-2010-0267)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigger this...
Mozilla Browsers JavaScript Argument Passing Code Execution - Ver2 (CVE-2007-0777)
Mozilla Firefox and Seamonkey are very popular open source web browsers from Mozilla Foundation, based on the Mozilla Suite code base. The browser is an application designed for tasks related to web browsing, such as displaying HTML pages, downloading files, rendering different media, and so on...
CVS Max-dotdot Protocol Command Integer Overflow - Ver2 (CVE-2004-0417)
Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...
Siemens Gigaset SE361 WLAN Remote Reboot Exploit Denial of Service - Ver2 (CVE-2009-3322)
A denial-of-service vulnerability has been reported in Siemens Gigaset SE361 WLAN router. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
DNS Label Compression Recursion Denial of Service - Ver2 (CVE-2007-1030)
A denial-of-service vulnerability has been reported in Niels Provos Libevent. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Novell eDirectory evtFilteredMonitorEventsRequest Invalid free Code Execution - Ver2 (CVE-2006-4510)
A code execution vulnerability has been reported in Novell eDirectory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
IBM Informix Dynamic Server Long Username Authentication Error Stack Overflow - Ver2 (CVE-2006-3854)
A buffer overflow vulnerability has been reported in IBM Informix Dynamic Database Server. An attacker could exploit this vulnerability via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. Successful exploitation of this vulnerability could all...
Internet Explorer XML Object Type Validation Code Execution - Ver2 (CVE-2003-0809)
A code execution vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Mozilla Firefox Design Mode Deleted Style Reference Memory Corruption - Ver2 (CVE-2007-3734)
A memory corruption vulnerability has been reported in Mozilla Firefox and Mozilla Thunderbird. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Mozilla Firefox Javascript Engine Code Execution - Ver2 (CVE-2006-3806)
A code execution vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla SeaMonkey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Wireshark ENTTEC DMX Data Buffer Overflow - Ver2 (CVE-2010-4538)
A buffer overflow vulnerability has been reported in Wireshark. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Firefox wyciwyg Cache Manipulation Flaw Information Disclosure - Ver2 (CVE-2007-3656)
An information disclosure vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Php libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1688)
A code execution vulnerability has been reported in Squery. An attacker could exploit this vulnerability via a URL in the libpath parameter to scripts in the lib directory including ase.php, devi.php, doom3.php, et.php, flashpoint.php, gameSpy.php, gameSpy2.php, gore.php, gsvari.php, halo.php,...
Microsoft Host Integration Server Remote Command Execution (MS08-059) - Ver2 (CVE-2008-3466)
Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. . A remote code execution vulnerability has been...
Microsoft Visual Basic 6 Enterprise SP6 vb6stkitdll Buffer Overflow - Ver2 (CVE-2008-2959)
A buffer overflow vulnerability has been reported in Microsoft Visual Basic Enterprise Edition. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Internet Explorer OnLoad Event Memory Corruption (MS11-081) - Ver2 (CVE-2011-1997)
A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way IE accesses objects that have been deleted. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful exploitation may cause...
Piwigo Photo Gallery Project install script Directory Traversal - Ver2 (CVE-2013-1469)
A directory traversal vulnerability has been reported in Piwigo. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Microsoft Fax Cover Page Editor Buffer Overflow - Ver2 (CVE-2010-4701)
A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...
Microsoft Graphics Device Interface Integer Overflow - Ver2 (CVE-2013-3940)
An integer overflow vulnerability has been reported in the way that the Windows Graphics Device Interface GDI processes specially crafted image files. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted Windows Write file. Successful exploitation of this...
Adobe Shockwave Player Chunk Parsing Uninitialized Object Access (APSB12-13) - Ver2 (CVE-2012-2030)
A remote code execution vulnerability has been reported in Adobe Shockwave player. The vulnerability is due to an error in Adobe Shockwave Player while parsing crafted data inside rcsL RIFF chunk in DIR or DCR files. A remote attacker can exploit this issue by enticing a target user to open a...
Symantec System Center Alert Management System Arbitrary Command Execution - Ver2 (CVE-2009-1429)
A command execution vulnerability has been reported in Symantec Antivirus Central Quarantine Server, Symantec Antivirus, Symantec Endpoint Protection, Symantec System Center and Symantec Client Security. Successful exploitation of this vulnerability could allow a remote attacker to execute...
MIT Kerberos ASN.1 asn1_decode_generaltime Uninitialized Pointer Reference - Ver2 (CVE-2009-0846)
MIT Kerberos V5 is an implementation of the Kerberos protocol that allows for the negotiation of an authenticated, and optionally encrypted, communication channel between two points on a network. The MIT Kerberos V5 server utilizes the encrypted SUN-RPC protocol to communicate with its remote...
Rocket Servergraph Admin Center fileRequestor Directory Traversal - Ver2 (CVE-2014-3914)
A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...
Multiple PDF products Launch Action Command Code Execution (APSB10-15) - Ver2 (CVE-2010-1240)
Portable Document Format PDF is an open file format created by Adobe Systems. A vulnerability has been discovered in Adobe Reader. The vulnerability is due to an error in the Adobe Reader that fails to restrict the contents of one text field in the Launch File warning dialog, which makes it easie...
Internet Explorer WMF CreateBrushIndirect DoS - Ver2 (CVE-2006-4071)
A denial-of-service vulnerability has been reported in Microsoft Windows XP and Microsoft Windows Server 2003. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Novell Groupwise Addressbook Integer Overflow - Ver2 (CVE-2012-0418)
A code execution vulnerability has been reported in Novell GroupWise. The vulnerability is due to a heap buffer overflow while parsing tokens within a specially crafted Novell Address Book .nab file. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .n...
Oracle Java AtomicReferenceArray Sandbox Breach Code Execution - Ver2 (CVE-2012-0507)
A code execution vulnerability has been reported in Oracle Java SE. The vulnerability is due to a design flaw in the implementation of the AtomicReferenceArray class in Java SE. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted Java application...
Apple Computer Finder DMG Volume Name Memory Corruption - Ver2 (CVE-2007-0197)
Apple Computer Mac OS X is the operating system bundled with Apple Macintosh computers. The graphical user interface shell of Mac OS X, Finder, allows for graphical browsing of the system. The Finder is also responsible for user-management of files, disks, network volumes and the launching of oth...
Mitsubishi MCWorkX ActiveX Control File Execution Command Execution - Ver2 (CVE-2013-2817)
A command execution vulnerability has been reported in Mitsubishielectric Mc-worx Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
OpenSSL TLS Connection Record Handling Denial of Service - Ver2 (CVE-2010-0740)
OpenSSL is an open-source library that implements Secure Sockets Layer SSL and Transport Layer Security TLS protocol functionality. A remote attacker may exploit this vulnerability to create a denial of service condition. The vulnerability is due to an error in the OpenSSL ssl3getrecord function...
VLC Media Player ABC File Parsing Buffer Overflow - Ver2 (CVE-2013-4233)
A buffer overflow vulnerability has been reported in VLC Media Player's ABC file parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
RealNetworks HELIX Server Denial of Service - Ver2 (CVE-2004-0389)
A denial-of-service vulnerability has been reported in Realnetworks Helix Universal Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Digium Asterisk Manager User Shell Command Execution - Ver2 (CVE-2012-2414)
A security bypass vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in the way the server validates permissions while executing shell commands from unauthorized users. A remote attacker can exploit this issue by sending specially crafted AMI requests to the...
MediaDescriptiondispvalue DoS - Ver2 (CVE-2006-3897)
A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...