Microsoft Office Bad Index Remote Code Execution (MS14-069; CVE-2014-6334)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...

Microsoft Office Invalid Pointer Remote Code Execution (MS14-069; CVE-2014-6335)

A remote code execution vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word fil...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6345)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Internet Explorer ASLR Bypass (MS14-065; CVE-2014-6339)

A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper implementation of the Address Space Layout Randomization ASLR security feature. A remote attacker can exploit this issue by enticing a user to open a specially crafted...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6351)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6346)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft SharePoint Active Scripting Elevation of Privilege (MS14-073; CVE-2014-4116)

An elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint Server sanitizes page content in SharePoint lists. A remote attacker may exploit this issue by enticing a target user to open a specially crafted...

Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)

A remote code execution vulnerability has been reported in Microsoft Windows Object Linking and Embedding OLE. The vulnerability is due to an improper access to memory objects by Internet Explorer. A remote attacker can exploit this issue by enticing target users to view a specially crafted...

Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)

A remote code execution vulnerability has been reported in Secure Channel Schannel security package. The vulnerability is caused when Schannel in a server system improperly processes specially crafted packets. An attacker could attempt to exploit this vulnerability by sending specially crafted...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-4143)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Elevation of Privilege (MS14-065: CVE-2014-6350)

An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6344)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Windows MSXML XSLT Remote Code Execution (MS14-067; CVE-2014-4118)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in MSXML when parsing specially crafted XML content. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file or web page...

Microsoft Windows TCP/IP IOCTL Processing Elevation of Privilege (MS14-070; CVE-2014-4076)

An elevation of privilege vulnerability exists in the Windows TCP/IP stack. The vulnerability is caused when the Windows TCP/IP stack fails to properly handle objects in memory during IOCTL processing. To exploit this vulnerability, an attacker would first have to log on to the system and run a...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6341)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6343; CVE-2015-1662)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6340)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Windows Audio Service Elevation of Privilege (MS14-071; CVE-2014-6322)

An elevation of privilege vulnerability has been reported in Windows audio service that could be exploited through Internet Explorer. The vulnerability is due to the way Internet Explorer improperly validates permissions under specific conditions. A remote attacker may exploit this issue by...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6342)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

XOOPS Module xhresim Remote SQL Injection (CVE-2008-5665)

An SQL injection vulnerability has been reported in Xoops. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Wordpress Download Manager Plugin Arbitrary File Upload (CVE-2008-3362)

An Arbitrary File Upload vulnerability has been reported in Wordpress Download Manager Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_obSuggest Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com ObSuggest. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_dailymeals Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Dailymeals. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_jashowcase Remote SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Jashowcase. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_janews Local File Inclusion (CVE-2010-1219)

A file inclusion vulnerability has been reported in Joomla Com Janews. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_ganalytics Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Ganalytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_acteammember SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Acteammember. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Uploader File Disclosure (CVE-2008-7178)

An information disclosure vulnerability has been reported in Xoops Uploader. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Joomla Component com_rsappt_pro2 Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Rsappt Pro2. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla component com_jp_jobs SQL Injection (CVE-2010-1350)

An SQL injection vulnerability has been reported in Joomlaprojects Com Jp Jobs. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_lyftenbloggie Remote SQL Injection (CVE-2009-4104)

An SQL injection vulnerability has been reported in Lyften Com Lyftenbloggie. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_virtuemart SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Virtuemart. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_category SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Category. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 userjournals_menu Plugin SQL Injection

An SQL injection vulnerability has been reported in E107 Userjournals Menu Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

PHPNuke friendphp Module Remote SQL Injection

An SQL injection vulnerability has been reported in PHPNuke Friend.php Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_xmovie Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Xmovie. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_markt SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Markt. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_billyportfolio SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Billyportfolio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_idoBlog Remote SQL Injection (CVE-2008-2627)

An SQL injection vulnerability has been reported in Joomla Com Idoblog. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 7 CMS Plugin SQL Injection (CVE-2011-5186)

An SQL injection vulnerability has been reported in Burnsy Jbshop Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_clanlist SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Clanlist. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_equotes Remote SQL Injection (CVE-2008-2628)

An SQL injection vulnerability has been reported in Ron Liskey Com Equotes. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS articlephp SQL Injection (CVE-2008-2094)

An SQL injection vulnerability has been reported in Xoops Article Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Friendfinder SQL Injection (CVE-2007-1838)

An SQL injection vulnerability has been reported in Xoops Friendfinder Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_performs Remote File Inclusion (CVE-2006-3774)

A file inclusion vulnerability has been reported in Joomla Performs Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_liveticker SQL Injection (CVE-2008-6148)

An SQL injection vulnerability has been reported in Raven-worx Liveticker. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module RM and Soft Gallery SQL Injection (CVE-2007-1806)

An SQL injection vulnerability has been reported in Red Mexico Rm+soft Gallery. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_dateconverter SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Dateconverter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_netinvoice SQL Injection (CVE-2008-3498)

An SQL injection vulnerability has been reported in Netshinesoftware Com Netinvoice. An attacker could exploit this vulnerability via the cid parameter in an orders action to index.php. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands o...

Joomla Component ds_syndicate SQL Injection (CVE-2008-4623)

An SQL injection vulnerability has been reported in Martin Diphoorn Ds-syndicate. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...