13538 matches found
Microsoft Office Double Delete Remote Code Execution (MS14-069; CVE-2014-6333)
A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...
Microsoft SharePoint Active Scripting Elevation of Privilege (MS14-073; CVE-2014-4116)
An elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint Server sanitizes page content in SharePoint lists. A remote attacker may exploit this issue by enticing a target user to open a specially crafted...
Microsoft Internet Explorer Elevation of Privilege (MS14-065: CVE-2014-6349)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Windows Audio Service Elevation of Privilege (MS14-071; CVE-2014-6322)
An elevation of privilege vulnerability has been reported in Windows audio service that could be exploited through Internet Explorer. The vulnerability is due to the way Internet Explorer improperly validates permissions under specific conditions. A remote attacker may exploit this issue by...
Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6345)
An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...
Microsoft Office Invalid Pointer Remote Code Execution (MS14-069; CVE-2014-6335)
A remote code execution vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word fil...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6337)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6342)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer ASLR Bypass (MS14-065; CVE-2014-6339)
A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper implementation of the Address Space Layout Randomization ASLR security feature. A remote attacker can exploit this issue by enticing a user to open a specially crafted...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-4143)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6351)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6347)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6340)
An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6343; CVE-2015-1662)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)
A remote code execution vulnerability has been reported in Microsoft Windows Object Linking and Embedding OLE. The vulnerability is due to an improper access to memory objects by Internet Explorer. A remote attacker can exploit this issue by enticing target users to view a specially crafted...
Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6346)
An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...
Microsoft Windows TCP/IP IOCTL Processing Elevation of Privilege (MS14-070; CVE-2014-4076)
An elevation of privilege vulnerability exists in the Windows TCP/IP stack. The vulnerability is caused when the Windows TCP/IP stack fails to properly handle objects in memory during IOCTL processing. To exploit this vulnerability, an attacker would first have to log on to the system and run a...
Microsoft Internet Explorer Elevation of Privilege (MS14-065: CVE-2014-6350)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)
A remote code execution vulnerability has been reported in Secure Channel Schannel security package. The vulnerability is caused when Schannel in a server system improperly processes specially crafted packets. An attacker could attempt to exploit this vulnerability by sending specially crafted...
E107 contact php Code Execution (CVE-2010-2099)
Code Execution vulnerability has been reported in E107 contact.php. Successful exploitation of this vulnerability would allow a remote attacker to execute a local code...
Joomla Component com_jabode Remote SQL Injection (CVE-2008-7169)
An SQL injection vulnerability has been reported in Jabode Com Jabode. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
OpenSSL TLS Protocol Downgrade Attack (CVE-2014-3511)
OpenSSL allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server, even though both client and server support later TLS versions...
MyBB Profile Blogs Plugin SQL Injection
An SQL injection vulnerability has been reported in MyBB Profile Blogs Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_ijoomla_archive SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Ijoomla Archive. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla com_na_newsdescription SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Na Newsdescription. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_dshop SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Dshop. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_acooldebate Local File Inclusion
A file inclusion vulnerability has been reported in Joomla Com Acooldebat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_alameda SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Alameda. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_xevidmegahd Remote SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Xevidmegahd. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_newsflash Remote SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Newsflash. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_doqment SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Doqment. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_rwcards Local File Inclusion
A file inclusion vulnerability has been reported in Joomla Com Rwcards. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_avosbillets SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Avosbillets. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_spidercalendar SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Spidercalendar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_dashboard Directory Traversal
A directory traversal vulnerability has been reported in Joomla Rsfiles. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Joomla Component com_adsmanager Remote File Inclusion
A file inclusion vulnerability has been reported in Joomla Com Adsmanager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_clan SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Clan. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
KingChat myBB Plugin SQL Injection
An SQL injection vulnerability has been reported in KingChat MyBB Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
XOOPS Module RM and Soft Gallery SQL Injection (CVE-2007-1806)
An SQL injection vulnerability has been reported in Red Mexico Rm+soft Gallery. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Adobe Flash Player Memory Corruption (APSB14-21: CVE-2014-0555)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Joomla Component com_gurujibook SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Gurujibook. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_joomnik SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Joomnik. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_linkdirectory Remote File Inclusion
A file inclusion vulnerability has been reported in Joomla Com Linkdirectory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_jeauto Local File Inclusion
A file inclusion vulnerability has been reported in Joomla Com Jeauto. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla Component com_event Multiple
An Multiple vulnerability has been reported in Joomla Com Event. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_phocagallery SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Phocagallery. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_billyportfolio SQL Injection
An SQL injection vulnerability has been reported in Joomla Com Billyportfolio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Component com_mdigg SQL Injection (CVE-2008-6149)
An SQL injection vulnerability has been reported in Joomlaapps Com Mdigg. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
E107 userjournals_menu Plugin SQL Injection
An SQL injection vulnerability has been reported in E107 Userjournals Menu Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
E107 alternate_profiles Plugin SQL Injection (CVE-2008-4785)
An SQL injection vulnerability has been reported in E107 Alternate Profiles Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...