Microsoft Windows TCP/IP IOCTL Processing Elevation of Privilege (MS14-070; CVE-2014-4076)

An elevation of privilege vulnerability exists in the Windows TCP/IP stack. The vulnerability is caused when the Windows TCP/IP stack fails to properly handle objects in memory during IOCTL processing. To exploit this vulnerability, an attacker would first have to log on to the system and run a...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6345)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Internet Explorer Elevation of Privilege (MS14-065: CVE-2014-6350)

An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...

Microsoft Internet Explorer ASLR Bypass (MS14-065; CVE-2014-6339)

A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper implementation of the Address Space Layout Randomization ASLR security feature. A remote attacker can exploit this issue by enticing a user to open a specially crafted...

Microsoft SharePoint Active Scripting Elevation of Privilege (MS14-073; CVE-2014-4116)

An elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint Server sanitizes page content in SharePoint lists. A remote attacker may exploit this issue by enticing a target user to open a specially crafted...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6341)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6344)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Office Bad Index Remote Code Execution (MS14-069; CVE-2014-6334)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...

Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)

A remote code execution vulnerability has been reported in Microsoft Windows Object Linking and Embedding OLE. The vulnerability is due to an improper access to memory objects by Internet Explorer. A remote attacker can exploit this issue by enticing target users to view a specially crafted...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-4143)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6346)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Office Invalid Pointer Remote Code Execution (MS14-069; CVE-2014-6335)

A remote code execution vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word fil...

Microsoft Windows MSXML XSLT Remote Code Execution (MS14-067; CVE-2014-4118)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in MSXML when parsing specially crafted XML content. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file or web page...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6351)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)

A remote code execution vulnerability has been reported in Secure Channel Schannel security package. The vulnerability is caused when Schannel in a server system improperly processes specially crafted packets. An attacker could attempt to exploit this vulnerability by sending specially crafted...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6342)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Windows Audio Service Elevation of Privilege (MS14-071; CVE-2014-6322)

An elevation of privilege vulnerability has been reported in Windows audio service that could be exploited through Internet Explorer. The vulnerability is due to the way Internet Explorer improperly validates permissions under specific conditions. A remote attacker may exploit this issue by...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6340)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6343; CVE-2015-1662)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Joomla Component com_realestatemanager Remote File Inclusion (CVE-2009-2635)

A file inclusion vulnerability has been reported in Ordasoft Com Realestatemanager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_xgallery Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Xgallery. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_idoBlog Remote SQL Injection (CVE-2008-2627)

An SQL injection vulnerability has been reported in Joomla Com Idoblog. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_joomlaradio Remote File Inclusion (CVE-2007-4923)

A file inclusion vulnerability has been reported in Joomla Radio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_equotes Remote SQL Injection (CVE-2008-2628)

An SQL injection vulnerability has been reported in Ron Liskey Com Equotes. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 7 CMS Plugin SQL Injection (CVE-2011-5186)

An SQL injection vulnerability has been reported in Burnsy Jbshop Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla component com_jp_jobs SQL Injection (CVE-2010-1350)

An SQL injection vulnerability has been reported in Joomlaprojects Com Jp Jobs. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_clanlist SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Clanlist. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_equipment SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Equipment. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Jobs Remote SQL Injection (CVE-2007-2370)

An SQL injection vulnerability has been reported in Xoops John Mordo Jobs Module. An attacker could exploit this vulnerability via the cid parameter in a jobsview action. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected...

Joomla Component com_obSuggest Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com ObSuggest. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_ganalytics Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Ganalytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_category SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Category. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_billyportfolio SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Billyportfolio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_jashowcase Remote SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Jashowcase. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_newsflash Remote SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Newsflash. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_virtuemart SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Virtuemart. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_markt SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Markt. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla component com_ponygallery SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Ponygallery. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_lyftenbloggie Remote SQL Injection (CVE-2009-4104)

An SQL injection vulnerability has been reported in Lyften Com Lyftenbloggie. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

MyBB Profile Blogs Plugin SQL Injection

An SQL injection vulnerability has been reported in MyBB Profile Blogs Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_contact Info SQL Injection (CVE-2008-5494)

An SQL injection vulnerability has been reported in Digitalgreys Com Contactinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_gigcal SQL Injection (CVE-2009-0726)

An SQL injection vulnerability has been reported in Gigcalendar Com Gigcalendar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_jgen SQL Injection (CVE-2010-3422)

An SQL injection vulnerability has been reported in Solventus Com Jgen. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_alameda SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Alameda. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_expshop SQL Injection (CVE-2008-2892)

An SQL injection vulnerability has been reported in Feellove Exp Shop ComponentFeellove Exp Shop Component. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component Jw_allVideos Remote File Download (CVE-2010-0696)

A directory traversal vulnerability has been reported in Joomlaworks Jw Allvideos. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Joomla Component com_5starhotels SQL Injection (CVE-2008-5864)

An SQL injection vulnerability has been reported in Joomla Com 5starhotels. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

PHP Nuke Module htmltonuke php Remote File Inclusion (CVE-2006-0308)

A file inclusion vulnerability has been reported in Htmltonuke. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla component com_fastball SQL Injection (CVE-2009-3443)

An SQL injection vulnerability has been reported in Fastballproductions Com Fastball. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_photoblog alpha 3 SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Photoblog alpha 3. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...