Multiple SonicWALL Products Authentication Bypass - Ver2 (CVE-2013-1359)

An authentication bypass vulnerability has been reported in SonicWALL Products. The vulnerability is due to authentication bypass in the Web Administration interface. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Internet Explorer HtmlDlgHelper Class Memory Corruption - Ver2 (CVE-2010-3329)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. Successful exploitation of...

Apple Iphone OS Springboard Application Malformed Character Denial of Service - Ver2 (CVE-2010-1226)

A denial-of-service vulnerability has been reported in Apple Iphone OS. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)

A code execution vulnerability has been reported in the Windows Common Controls. The vulnerability is due to a corruption of the system state by the TabStrip ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected syst...

Google Chrome and Apple Safari Apple Webkit Ruby Memory Corruption - Ver2 (CVE-2011-1440)

A memory corruption vulnerability has been reported within Apple WebKit, a component of Apple Safari and Google Chrome web browsers and Apple iTunes. The vulnerability is due to an error in Apple Webkit while handling certain display properties within the ruby:before and ruby:after style sheet...

GDI WMF File Rendering Code Execution - Ver2 (CVE-2005-2124)

A code execution vulnerability has been reported in Microsoft GDI. An attacker could exploit this vulnerability via a crafted Windows Metafile WMF format image. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer JavaScript window() Memory Corruption (MS05-054) - Ver2 (CVE-2005-1790)

Microsoft Internet Explorer is a web browser capable of displaying HTML encoded pages, downloading files, etc. This application has a built-in JavaScript interpreter. It is also capable of using Document Object Model DOM objects, in particular by providing access to them through JavaScript. A...

Novell Groupwise 8.02 Addressbook Memory Corruption - Ver2 (CVE-2011-4189)

A code execution vulnerability has been reported in Novell GroupWise. The vulnerability is due to a heap buffer overflow while parsing tokens within a specially crafted Novell Address Book .nab file. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .n...

Apple Webkit HTML Parsing Rowspan Denial of Service - Ver2 (CVE-2007-0342)

A denial-of-service vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

OpenSwan and StrongSwan DPD Packet Remote Denial of Service - Ver2 (CVE-2009-0790)

A denial-of-service vulnerability has been reported in OpenswanOpenswan Openswan. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Internet Explorer EMF File Rendering Denial of Service - Ver2 (CVE-2005-0803)

A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. An attacker could exploit this vulnerability via a crafted Enhanced Metafile EMF file that causes invalid end, emreof, or palent offsets to be used. Successful exploitation of this vulnerability would allow a remo...

Microsoft XML Core Services Nested Tag Memory Corruption- Ver2 (CVE-2007-0099)

A memory corruption vulnerability has been reported in Xml Core Services. The vulnerability is due to the way that Microsoft XML Core Services handles nested tags. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mozilla Firefox InstallTrigger.install Method Denial of Service - Ver2 (CVE-2006-1790)

A denial-of-service vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apache Win32 DOS Batch File Arbitrary Command Execution - Ver2 (CVE-2002-0061)

A command execution vulnerability has been reported in Apache Software Foundation Apache HTTP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Multiple Antivirus Products RAR Parser MZ Character Sequence Security Bypass - Ver2 (CVE-2012-1443)

A security bypass vulnerability has been reported in multiple antivirus products. An attacker could exploit this vulnerability via a RAR file with an initial MZ character sequence. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on...

Microsoft GDI+ WMF Integer Overflow (MS09-062) - Ver2 (CVE-2009-2500)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer.Windows Metafile WMF is a 16-bit metafile image format optimized for the Windows operating system that can contain both vector information and bitmap...

Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)

A buffer overflow vulnerability has been reported in Nullsoft Winamp. The vulnerability is due to a heap buffer overflow while handling a malformed AVI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft DirectShow AVI Parser Heap Overflow - Ver2 (CVE-2010-0250)

A buffer overflow vulnerability has been reported in Microsoft DirectShow. The vulnerability is due to the way Microsoft DirectShow component handles specially crafted AVI files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

Adobe Multiple Products authplay.dll PDF File Code Execution - Ver2 (CVE-2010-1297)

A code execution vulnerability has been reported in multiple Adobe products. The vulnerability is due to the authplay. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle Java sun.tracing.ProviderSkeleton Sandbox Bypass Code Execution - Ver2 (CVE-2013-2460)

A code execution vulnerability has been reported in Oracle Java. The vulnerability is due to Oracle Java allowing calls to arbitrary static methods with user supplied arguments via the invoke method. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary...

Mozilla Firefox CSS letter-spacing Heap Overflow - Ver2 (CVE-2006-1730)

The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. This application has a built-in JavaScript interpreter. It is also capable of using Cascading Style Sheets CSS. There exists a heap bas...

Microsoft Windows ANI file Denial of Service - Ver2 (CVE-2007-1765)

A denial-of-service vulnerability has been reported in Microsoft Windows. An attacker could exploit this vulnerability via a malformed ANI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Wim Fleischhauer Docpile INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4076)

A code execution vulnerability has been reported in Wim Fleischhauer Docpile. An attacker could exploit this vulnerability via a URL in the INITPATH parameter to lib/access.inc.php, lib/folders.inc.php, lib/init.inc.php or lib/templates.inc.php. Successful exploitation of this vulnerability could...

Adobe Reader cooltype.dll Remote Code Execution - Ver2 (CVE-2010-2862)

A code execution vulnerability has been reported in Adobe Reader. The vulnerability is due to the cooltype. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition and execute arbitrary code on the affected system...

Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08) - Ver2 (CVE-2012-0774)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Microsoft Office Excel SxView Record Memory Corruption - Ver2 (CVE-2009-3128)

A memory corruption vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute...

Mozilla Firefox CSS letter-spacing Heap Overflow - Ver2 (CVE-2006-1730)

A buffer overflow vulnerability has been reported in Mozilla Firefox. The vulnerability is due to an integer overflow leading to an insufficient buffer allocation while rendering the CSS spacing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

MSSQL 2000MSDE Resolution Buffer Overflow - Ver2 (CVE-2002-0649)

A buffer overflow vulnerability has been reported in Microsoft MSDE and Microsoft SQLServer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Windows Graphics Rendering Engine Code Execution (MS07-046) - Ver2 (CVE-2007-3034)

The Windows Metafile WMF is a standard Windows image file format. It consists of a set of graphics functions and parameters that describe the steps required to render an image. WMF is a 16-bit format that can contain both vector and bitmap information. A WMF file contains a main header, followed ...

IBM Forms Viewer XFDL Form Processing Stack Buffer Overflow - Ver2 (CVE-2013-5447)

A buffer overflow vulnerability has been reported in IBM Forms Viewer. The vulnerability is due to an error when processing XFDL forms and can be exploited to cause a stack-based buffer overflow. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

Oracle Java and JavaFX JPEGImageReader Memory Corruption - Ver2 (CVE-2013-2430)

A memory corruption vulnerability has been reported in Oracle Java and JavaFX. The vulnerability is due to improper safeguards against object manipulation. A remote attacker can exploit this vulnerability by enticing the target user to visit a specially crafted web page. Successful exploitation o...

Oracle Java and JavaFX JPEGImageReader Memory Corruption - Ver2 (CVE-2013-2430)

A memory corruption vulnerability has been reported in Oracle Java and JavaFX. The vulnerability is due to improper safeguards against object manipulation. A remote attacker can exploit this vulnerability by enticing the target user to visit a specially crafted web page. Successful exploitation o...

Oracle Java JPEGImageWriter Memory Corruption - Ver2 (CVE-2013-2429)

A memory corruption vulnerability has been reported in Oracle Java. The vulnerability is due to improper safeguards against object manipulation in stream writer callbacks from native code in com. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

MyNewsGroups layersmenu.inc.php myng_root Parameter PHP Code Execution - Ver2 (CVE-2006-3966)

A code execution vulnerability has been reported in MyNewsGroups. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer Selection Object Memory Corruption (MS11-050) - Ver2 (CVE-2011-1261)

This is a remote code execution vulnerability. When Internet Explorer attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user. Successful exploitation of...

Microsoft DirectShow QuickTime Movie Parser Filter Code Execution - Ver2 (CVE-2009-1537)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The QuickTime Movie Parser filter splits Apple QuickTime data into audio and video streams. The vulnerability is due to the way Microsof...

Microsoft Windows Shell MSHTA Script Execution in OLE Files (MS05-016) - Ver2 (CVE-2005-0063)

The Windows operating system provides facilities that make it possible to invoke different applications to handle different types of files. This makes it possible for a user to double click on a known image type file, for instance, and by that action launch the proper application to display or ed...

AWStats rawlog Plugin File Information Disclosure - Ver2 (CVE-2005-0435)

An information disclosure vulnerability has been reported in Awstats. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...

Internet Explorer JavaScript window() Memory Corruption (MS05-054) - Ver2 (CVE-2005-1790)

Microsoft Internet Explorer is a web browser capable of displaying HTML encoded pages, downloading files, etc. This application has a built-in JavaScript interpreter. It is also capable of using Document Object Model DOM objects, in particular by providing access to them through JavaScript. A...

Chimera Web Portal System modules.php comment_poster Cross-Site Scripting - Ver2 (CVE-2006-0136)

A cross-site scripting vulnerability has been reported in Phanatic Softwares Chimera Web Portal. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

WordPress Complete Gallery Manager Plugin Arbitrary Code Execution - Ver2 (CVE-2013-5962)

A code execution vulnerability has been reported in Envato Complete Gallery Manager Plugin for WordPress. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle Outside In OS2 Metafile Parser Stack Buffer Overflow - Ver2 (CVE-2013-5763)

A code execution vulnerability has been reported in Oracle Outside In. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Trimble Navigation SketchUp BMP File Code Execution - Ver2 (CVE-2013-3663)

A remote code execution vulnerability exists in Trimble Navigation's SketchUp. The vulnerability is due to a heap buffer overflow while processing BMP files which contain malicious RLE data. Remote unauthenticated attackers can exploit this vulnerability by enticing a target user to open a...

Dlink IP Camera Video Stream Authentication Bypass - Ver2 (CVE-2013-1600)

An authentication bypass vulnerability has been reported in several D-Link IP Cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

Apple Safari for Windows URL Address Spoofing - Ver2 (CVE-2008-1999)

An address spoofing vulnerability has been reported in Apple Safari. Successful exploitation of this vulnerability would allow a remote attacker to spoof the contents of the address of bar on te victims web browser...

Microsoft Windows Embedded OpenType Font Engine LZCOMP Integer Overflow - Ver2 (CVE-2010-0018)

An integer overflow vulnerability has been reported in Microsoft Windows Embedded OpenType Font Engine. The vulnerability is due to insufficient validation while processing an EOT font. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

Novell ZENworks Asset Management File Upload Directory Traversal - Ver2 (CVE-2010-4229)

A directory traversal vulnerability has been reported in Novell ZENworks. The vulnerability is due to improper handling of path names when uploading files via ZENworks Asset Management. Successful exploitation of this vulnerability would allow a remote attacker to list directories, create arbitra...

Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs ...

Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs ...

Microsoft Windows Mail HTML Link Program Execution - Ver2 (CVE-2007-1658)

A command and program execution vulnerability has been reported in Microsoft Windows Vista. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands and programs on the affected system...