Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6351)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6340)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Internet Explorer Elevation of Privilege (MS14-065: CVE-2014-6350)

An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6346)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6344)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Office Invalid Pointer Remote Code Execution (MS14-069; CVE-2014-6335)

A remote code execution vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word fil...

Microsoft Office Bad Index Remote Code Execution (MS14-069; CVE-2014-6334)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6345)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Microsoft Office Double Delete Remote Code Execution (MS14-069; CVE-2014-6333)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6347)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Windows TCP/IP IOCTL Processing Elevation of Privilege (MS14-070; CVE-2014-4076)

An elevation of privilege vulnerability exists in the Windows TCP/IP stack. The vulnerability is caused when the Windows TCP/IP stack fails to properly handle objects in memory during IOCTL processing. To exploit this vulnerability, an attacker would first have to log on to the system and run a...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6343; CVE-2015-1662)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6348)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6342)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft SharePoint Active Scripting Elevation of Privilege (MS14-073; CVE-2014-4116)

An elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint Server sanitizes page content in SharePoint lists. A remote attacker may exploit this issue by enticing a target user to open a specially crafted...

Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)

A remote code execution vulnerability has been reported in Secure Channel Schannel security package. The vulnerability is caused when Schannel in a server system improperly processes specially crafted packets. An attacker could attempt to exploit this vulnerability by sending specially crafted...

Microsoft Internet Explorer Clipboard Information Disclosure (MS14-065; CVE-2014-6323)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an improper restriction of access to the clipboard of a user who visits a website. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6341)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)

A remote code execution vulnerability has been reported in Microsoft Windows Object Linking and Embedding OLE. The vulnerability is due to an improper access to memory objects by Internet Explorer. A remote attacker can exploit this issue by enticing target users to view a specially crafted...

Joomla Component com_lyftenbloggie Remote SQL Injection (CVE-2009-4104)

An SQL injection vulnerability has been reported in Lyften Com Lyftenbloggie. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_mambowiki Remote File Inclusion (CVE-2006-4282)

A file inclusion vulnerability has been reported in Mamboxchange Mambowiki. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

XOOPS Module MyConference SQL Injection (CVE-2007-2737)

An SQL injection vulnerability has been reported in Xoops Myconference Module. An attacker could exploit this vulnerability via the cid parameter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Flashgames Remote SQL Injection (CVE-2007-2543)

An SQL injection vulnerability has been reported in Xoops Flashgames Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_portfol SQL Injection (CVE-2009-0494)

An SQL injection vulnerability has been reported in Mivaco Com Portfol. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Jobs Remote SQL Injection (CVE-2007-2370)

An SQL injection vulnerability has been reported in Xoops John Mordo Jobs Module. An attacker could exploit this vulnerability via the cid parameter in a jobsview action. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected...

Joomla Component com_equipment SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Equipment. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_contact Info SQL Injection (CVE-2008-5494)

An SQL injection vulnerability has been reported in Digitalgreys Com Contactinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_marketplace SQL Injection (CVE-2008-0689)

An SQL injection vulnerability has been reported in Joomla Com Marketplace. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_xewebtv SQL Injection (CVE-2008-5200)

An SQL injection vulnerability has been reported in Joomla Com Xewebtv. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component JE Media Player Arbitrary File Upload

An Arbitrary File Upload vulnerability has been reported in Joomla JE Media PlayerLFI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_liveticker SQL Injection (CVE-2008-6148)

An SQL injection vulnerability has been reported in Raven-worx Liveticker. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_ownbiblio SQL Injection (CVE-2008-6184)

An SQL injection vulnerability has been reported in Medialab-karlsruhe Ownbiblio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 contact php Code Execution (CVE-2010-2099)

Code Execution vulnerability has been reported in E107 contact.php. Successful exploitation of this vulnerability would allow a remote attacker to execute a local code...

XOOPS Module Qas codigo SQL Injection (CVE-2009-4714)

An SQL injection vulnerability has been reported in Alexandre Amaral Xoops Celepar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_equotes Remote SQL Injection (CVE-2008-2628)

An SQL injection vulnerability has been reported in Ron Liskey Com Equotes. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_img Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Img. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_rsappt_pro2 Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Rsappt Pro2. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_beamospetition Remote SQL Injection (CVE-2008-3132)

An SQL injection vulnerability has been reported in Joomla Com Beamospetition. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla component com_ponygallery SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Ponygallery. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Camportail Remote SQL Injection (CVE-2007-1808)

An SQL injection vulnerability has been reported in Camportail. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module debaser SQL Injection (CVE-2007-1805)

An SQL injection vulnerability has been reported in Myxoops Debaser. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla component com_fastball SQL Injection (CVE-2009-3443)

An SQL injection vulnerability has been reported in Fastballproductions Com Fastball. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component ds_syndicate SQL Injection (CVE-2008-4623)

An SQL injection vulnerability has been reported in Martin Diphoorn Ds-syndicate. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_quickfaq SQL Injection (CVE-2010-2845)

An SQL injection vulnerability has been reported in Schlu.net Com Quickfaq. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Amevents SQL Injection (CVE-2008-5768)

An SQL injection vulnerability has been reported in Sirium Am Events Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_hmcommunity SQL Injection (CVE-2011-4808)

An SQL injection vulnerability has been reported in Joomlaextensions Com Hmcommunity. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_joomlaDate SQL Injection (CVE-2008-6068)

An SQL injection vulnerability has been reported in Web Design Hero Joomladate. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_content SQL Injection (CVE-2008-6923)

SQL injection vulnerability has been reported in Joomla Com Content. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_virtuemart SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Virtuemart. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla component com_iproperty SQL Injection (CVE-2010-1721)

An SQL injection vulnerability has been reported in Thethinkery Com Iproperty. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...