Microsoft Office RTF File listid Use-After-Free - Ver2 (CVE-2012-2528)

A use-after-free vulnerability has been reported in Microsoft Office Word. The vulnerability is due to a memory handling error while parsing specially crafted RTF Rich Text Format files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

Microsoft Word RTF Drawing Primitives Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4028)

Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...

WordPress Complete Gallery Manager Plugin Arbitrary Code Execution - Ver2 (CVE-2013-5962)

A code execution vulnerability has been reported in Envato Complete Gallery Manager Plugin for WordPress. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft DirectShow AVI Parser Heap Overflow - Ver2 (CVE-2010-0250)

A buffer overflow vulnerability has been reported in Microsoft DirectShow. The vulnerability is due to the way Microsoft DirectShow component handles specially crafted AVI files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

PHPenpals profile.php personalID Parameter SQL Injection - Ver2 (CVE-2006-0074)

An SQL injection vulnerability has been reported in Jevontech Phpenpals. An attacker could exploit this vulnerability via the personalID parameter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Word Section Table Array Buffer Overflow - Ver2 (CVE-2007-0515)

A buffer overflow vulnerability has been reported in Microsoft Office Word. The vulnerability is due to a flaw in the Section Table entry inside the Table Stream structure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer JavaScript window() Memory Corruption (MS05-054) - Ver2 (CVE-2005-1790)

Microsoft Internet Explorer is a web browser capable of displaying HTML encoded pages, downloading files, etc. This application has a built-in JavaScript interpreter. It is also capable of using Document Object Model DOM objects, in particular by providing access to them through JavaScript. A...

Oracle Java and JavaFX JPEGImageReader Memory Corruption - Ver2 (CVE-2013-2430)

A memory corruption vulnerability has been reported in Oracle Java and JavaFX. The vulnerability is due to improper safeguards against object manipulation. A remote attacker can exploit this vulnerability by enticing the target user to visit a specially crafted web page. Successful exploitation o...

AWStats rawlog Plugin File Information Disclosure - Ver2 (CVE-2005-0435)

An information disclosure vulnerability has been reported in Awstats. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...

GomPlayer wav Buffer Overflow - Ver2 (CVE-2013-5716)

A buffer overflow vulnerability has been reported in Gomlab Gom Player. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Dlink IP Camera Video Stream Authentication Bypass - Ver2 (CVE-2013-1600)

An authentication bypass vulnerability has been reported in several D-Link IP Cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

Microsoft Excel HFPicture Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-1248)

Microsoft Excel is a popular spreadsheet application. A stack overflow vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw by...

Cyberlink Power2Go p2g Project Buffer Overflow - Ver2 (CVE-2011-5171)

A buffer overflow vulnerability has been reported in Cyberlink Power2go. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Compface File long declaration Buffer Overflow - Ver2 (CVE-2009-2286)

A buffer overflow vulnerability has been reported in James Ashton Compface. An attacker could exploit this vulnerability by using a long declaration in a .xbm file. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected...

Microsoft Windows ANI file Denial of Service - Ver2 (CVE-2007-1765)

A denial-of-service vulnerability has been reported in Microsoft Windows. An attacker could exploit this vulnerability via a malformed ANI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08) - Ver2 (CVE-2012-0774)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Oracle Outside In OS2 Metafile Parser Stack Buffer Overflow - Ver2 (CVE-2013-5763)

A code execution vulnerability has been reported in Oracle Outside In. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)

An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...

Microsoft Windows Shell MSHTA Script Execution in OLE Files (MS05-016) - Ver2 (CVE-2005-0063)

The Windows operating system provides facilities that make it possible to invoke different applications to handle different types of files. This makes it possible for a user to double click on a known image type file, for instance, and by that action launch the proper application to display or ed...

Apple QuickTime STSD JPEG Atom Heap Corruption - Ver2 (CVE-2009-0007)

A memory corruption vulnerability has been reported in Apple's QuickTime. The vulnerability is due to lack of boundary checks while processing the JPEG atoms embedded in the STSD atom in QuickTime movie files. Successful exploitation of this vulnerability could allow a remote attacker to execute...

Microsoft Outlook MIME Email Message Parsing Remote Code Execution - Ver2 (CVE-2013-3870)

A code execution vulnerability has been reported in Microsoft Outlook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Google Chrome and Apple Safari Apple Webkit Ruby Memory Corruption - Ver2 (CVE-2011-1440)

A memory corruption vulnerability has been reported within Apple WebKit, a component of Apple Safari and Google Chrome web browsers and Apple iTunes. The vulnerability is due to an error in Apple Webkit while handling certain display properties within the ruby:before and ruby:after style sheet...

Ruby on Rails JSON Processor YAML Deserialization Code Execution - Ver2 (CVE-2013-0333)

A code execution vulnerability has been reported in Ruby on Rails. The vulnerability is due to an input validation error when JSON Processor deserializes YAML. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary code within the context of the underlying web serve...

Ultra Crypto Component Insecure Method Directory traversal - Ver2 (CVE-2007-4902)

A directory traversal vulnerability has been reported on Ultra Crypto. An attacker could exploit this vulnerability via full pathnames in the argument to the SaveToFile method. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the affected...

Akarru main_content.php bm_content Parameter PHP Code Execution - Ver2 (CVE-2006-4645)

A code execution vulnerability has been reported in Akarru Social Bookmarking Engine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Firefox Plugin Finder Javascript Injection - Ver2 (CVE-2005-0752)

A code execution vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Word Crafted Sprm Structure Stack Memory Corruption - Ver2 (CVE-2008-4837)

A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected syst...

Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs ...

GestArt aide.php3 aide Parameter PHP Code Execution - Ver2 (CVE-2006-5612)

A code execution vulnerability has been reported in Michel Pradel Gestart. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mozilla Firefox InstallTrigger.install Method Denial of Service - Ver2 (CVE-2006-1790)

A denial-of-service vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Trojan Client Remote Code Execution - Ver2 (CVE-1999-0660)

A code execution vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

MyNewsGroups layersmenu.inc.php myng_root Parameter PHP Code Execution - Ver2 (CVE-2006-3966)

A code execution vulnerability has been reported in MyNewsGroups. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Novell ZENworks Asset Management File Upload Directory Traversal - Ver2 (CVE-2010-4229)

The vulnerability is triggered when the application processes specially crafted POST request. . A directory traversal vulnerability has been reported in Novell ZENworks Configuration Management. This is a directory traversal vulnerability in Novell ZENworks Configuration Management. The...

Wim Fleischhauer Docpile INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4076)

A code execution vulnerability has been reported in Wim Fleischhauer Docpile. An attacker could exploit this vulnerability via a URL in the INITPATH parameter to lib/access.inc.php, lib/folders.inc.php, lib/init.inc.php or lib/templates.inc.php. Successful exploitation of this vulnerability could...

Lotus Notes RIM connector for Blackberry Desktop Manager ActiveX Denial of Service - Ver2 (CVE-2009-3038)

A denial-of-service vulnerability has been reported in Ibm Lotus Notes Connector. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Adobe Multiple Products authplay.dll PDF File Code Execution - Ver2 (CVE-2010-1297)

A code execution vulnerability has been reported in multiple Adobe products. The vulnerability is due to the authplay. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WebShag Security Scanner

WebShag is a vulnerability scanning product. Remote attackers can use WebShag to detect vulnerabilities on a target server...

Microsoft Windows TrueType Font Parsing Remote Code Execution (MS12-078) - Ver2 (CVE-2012-4786)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows handles specially crafted TTF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted web page or an email attachment...

Microsoft Excel NULL Pointer Denial of Service - Ver2 (CVE-2007-1239)

A denial-of-service vulnerability has been reported in Microsoft Excel. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Apple Webkit HTML Parsing Rowspan Denial of Service - Ver2 (CVE-2007-0342)

A denial-of-service vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315)

A script injection and execution vulnerability has been reported in Movable Type. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary Perl code and SQL commands on the affected system...

Zavio IP Camera Firmware 1.6.03 Authentication Bypass - Ver2 (CVE-2013-2567)

An authentication bypass vulnerability has been reported in the Zavio IP Camera firmware. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

Trimble Navigation SketchUp BMP File Code Execution - Ver2 (CVE-2013-3663)

A remote code execution vulnerability exists in Trimble Navigation's SketchUp. The vulnerability is due to a heap buffer overflow while processing BMP files which contain malicious RLE data. Remote unauthenticated attackers can exploit this vulnerability by enticing a target user to open a...

Oracle Java JPEGImageWriter Memory Corruption - Ver2 (CVE-2013-2429)

A memory corruption vulnerability has been reported in Oracle Java. The vulnerability is due to improper safeguards against object manipulation in stream writer callbacks from native code in com. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

Novell Groupwise 8.02 Addressbook Memory Corruption - Ver2 (CVE-2011-4189)

A code execution vulnerability has been reported in Novell GroupWise. The vulnerability is due to a heap buffer overflow while parsing tokens within a specially crafted Novell Address Book .nab file. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .n...

Oracle Java and JavaFX JPEGImageReader Memory Corruption - Ver2 (CVE-2013-2430)

A memory corruption vulnerability has been reported in Oracle Java and JavaFX. The vulnerability is due to improper safeguards against object manipulation. A remote attacker can exploit this vulnerability by enticing the target user to visit a specially crafted web page. Successful exploitation o...

Microsoft Windows MSDTC Denial of Service - Ver2 (CVE-2006-1184)

A denial-of-service vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Word RTF Control Word Handling Integer Overflow (MS08-072) - Ver2 (CVE-2008-4025)

Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...

Microsoft Word RTF Stylesheet Control Word Memory Corruption - Ver2 (CVE-2008-4031)

A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle malformed Rich Text Format. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on t...

EasyMail Object EMSMTP.DLL ActiveX Control Buffer Overflow - Ver2 (CVE-2007-4607)

A buffer overflow vulnerability has been reported in Quiksoft EasyMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...