Adobe Flash Player Information Disclosure (APSB14-08: CVE-2014-0504)

An information disclosure vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles specially crafted SWF files...

Microsoft Windows IPv6 Router Advertisements Denial of Service (MS14-006; CVE-2014-0254)

A denial of service vulnerability has been reported in Microsoft Windows. The vulnerability is due to a design weakness in the IPv6 stack as it processes router advertisement packets. An attacker can exploit this vulnerability by sending a large number of specially crafted IPv6 packets to the...

WellinTech Multiple Products kxClientDownload ActiveX Remote Code Execution (CVE-2013-2827)

A remote code execution vulnerability exists in WellinTech multiple products. The vulnerability exists in ClientDownload.ocx ActiveX control and is due to insufficient sanitization of ProjectURL property. A remote unauthenticated attacker can leverage this vulnerability to download and load an...

HP Data Protector EXEC_BAR Command Execution (CVE-2013-2347)

A command execution vulnerability has been reported in HP Data Protector. The vulnerability is due to a lack of input sanitization on a string provided with Opcode 11. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...

HP Data Protector Opcode 42 Directory Traversal (CVE-2013-6194)

A directory traversal vulnerability has been reported in HP Data Protector. The vulnerability is due to a lack of input sanitization on a file name provided with Opcode 42. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...

HP Data Protector Opcode 45 and 46 Code Execution (CVE-2013-2348)

Multiple vulnerabilities have been reported in HP Data Protector. Both vulnerabilities are due to insufficient input validation on a string supplied with a message containing opcodes 45 or 46. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0313)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0302)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0309)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open ...

Microsoft ASP.NET POST Request Denial of Service (MS14-009; CVE-2014-0253)

A denial of service vulnerability exists in Microsoft ASP.NET. The vulnerability is caused when the .NET Framework improperly identifies stale or closed HTTP client connections. A remote attacker can trigger this flaw by sending a small number of specially crafted requests to an affected server...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0305)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0314)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open ...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0298)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0311)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0303)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Web Servers HTTP Response Splitter Cache Poisoning

A Cache Poisoning vulnerability has been identified in multiple web servers. The vulnerability is due to an error in the way the web server sanitizes user input. A remote attacker can exploit this vulnerability by sending a malicious request to the server...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0312)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open ...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0299)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0304)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

OpenVAS Security Scanner

OpenVAS is a vulnerability scanning product. Remote attackers can use OpenVAS to detect vulnerabilities on a target server...

Symantec Endpoint Protection Manager XML External Entity Denial Of Service (CVE-2013-5014)

A XML external entity XXE vulnerability exists in Symantec Endpoint Protection Manager SEPM. This is due to an incorrectly configured XML parser in the management console that readily processes XML external entities. A remote unauthenticated attacker may exploit this vulnerability via specially...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0297)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Kerberos Cross-Realm Referrals KDC NULL Pointer Dereference Denial of Service (CVE-2013-1417)

A denial of service vulnerability has been reported in Kerberos. The vulnerability is due to a NULL pointer dereference within the "processtgsreq" function. A remote attacker can exploit this vulnerability by sending a specially crafted request to a KDC serving a realm...

Microsoft Word Memory Corruption (MS14-001; CVE-2014-0258)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially craft...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0306)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open ...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0324)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open ...

HP AIO Archive Query Server oasoa.exe Stack Buffer Overflow (CVE-2013-6189)

A stack buffer overflow vulnerability exists in HP Application Information Optimizer. The vulnerability is due to insufficient sanitization on the range of the opcode value. A remote unauthenticated attacker can leverage this vulnerability by sending crafted messages to the server...

Joomla! JomSocial Input Validation Remote Code Execution

A remote code execution vulnerability has been reported in Joomla!. The vulnerability is due to improper validation of user data. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to the target...

ESF pfSense webConfigurator firewall_aliases_edit.php Input Validation Error

An input validation error vulnerability exists in Electric Sheep Fencing pfSense firewall. The vulnerability is due to insufficient validation of user supplied input when processing the addressN parameter in firewallaliasesedit.php. A remote authenticated attacker could exploit this vulnerability...

OpenSSL DTLS Retransmission Denial of Service (CVE-2013-6450)

A use after free vulnerability has been reported in OpenSSL's handling of DTLS. The flaw is due to the clearing of DTLS context variable prior to a retransmission. This could lead to the OpenSSL application crashing resulting in a denial of service condition. A remote attacker could exploit this...

ESF pfSense Snort snort_log_view.php Information Disclosure

An information disclosure vulnerability exists in the pfSense Snort service. The vulnerability is due to insufficient validation of user-supplied input. A remote, authenticated attacker could use this vulnerability to retrieve valuable information from the server...

DirBuster Security Scanner

DirBuster is a vulnerability scanning product. Remote attackers can use DirBuster to detect vulnerabilities on a target server...

OpenSSL ssl_get_algorithm2 TLS Denial of Service (CVE-2013-6449)

A denial of service vulnerability has been reported in OpenSSL. The vulnerability is due to an error in sslgetalgorithms2 where the SSL/TLS version is obtained from an incorrect structure leading to a NULL pointer dereference when computing a message digest. A remote unauthenticated attacker can...

Apache Tomcat Large Chunked Transfer Denial of Service (CVE-2013-4322)

A denial of service vulnerability has been reported in Apache Tomcat. This vulnerability is due to Tomcat not discarding any extensions included in very long Chunked-transfer requests, even if they were not processed. A remote attacker could exploit this vulnerability by sending a large amount of...

WordPress Plugin AdRotate SQL Injection (CVE-2014-1854)

An SQL injection vulnerability has been reported in the AdRotate plugin for WordPress. Remote attacker can exploit this vulnerability to execute arbitrary SQL commands on the target...

phpBB viewtopic.php URL Decoding Code Execution - ver 2 (CVE-2004-1315)

A code injection and execution vulnerability has been reported in phpBB. The vulnerability is due to lack of input validation on the highlight parameter supplied to viewtopic.php. A remote attacker can exploit this issue by injecting malicious SQL code to the target server. Successful exploitatio...

Adobe Flash Player Memory Corruption (APSB14-07: CVE-2014-0499)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB14-07: CVE-2014-0498)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Microsoft Excel XLSX File Parsing Code Execution (MS10-017) - Ver2 (CVE-2010-0263)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

CSNews csNews.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1751)

A code execution vulnerability has been reported in Cgiscript.net Cslivesupport. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office Excel Field Sanitization Remote Code Execution (MS09-067) - Ver2 (CVE-2009-3134)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Wordpad and Windows Shell Com Validation Code Execution - Ver2 (CVE-2010-1263)

A code execution vulnerability has been reported in Microsoft Wordpad and Windows Shell. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Media Player HeaderExtensionObject Heap Overflow (MS09-052) - Ver2 (CVE-2009-2527)

ASF Advanced Systems Format is a file format that stores audio and video information and is specially designed to run over networks like the Internet. It is a compressed format that contains streaming audio, video, slide shows, and synchronized events. ASF enables content to be delivered as a...

Microsoft Word PlfLfo Structure Memory Corruption (MS08-072) - Ver2 (CVE-2008-4024)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory corruption error in Microsoft Word that fails to properly handle specially crafted Word files. A remote attacker could trigger th...

Microsoft Excel NAME Record Array Indexing Stack Buffer Corruption - Ver2 (CVE-2008-4266)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a stack corruption in Microsoft Excel when loading Excel records. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer SVG AnimateMotion Memory Corruption - Ver2 (CVE-2008-0077)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco IOS HTTP Authentication Bypass - Ver2 (CVE-2001-0537)

An authentication bypass vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Internet Explorer createTextRange Remote Code Execution (MS06-013) - Ver2 (CVE-2006-1359)

Microsoft Internet Explorer IE is a popular web browser application. The browser is capable of processing HTML, scripting languages, and interpreting various other popular Internet specifications. A remote code execution vulnerability has been identified in Microsoft Internet Explorer. The...

Microsoft FrontPage URL Device Denial of Service - Ver2 (CVE-2000-0709)

A denial-of-service vulnerability has been reported in Microsoft Frontpage. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft PowerPoint Viewer 2003 MSODRAWING Property Heap Buffer Overflow - Ver2 (CVE-2008-0121)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to memory calculation errors in Microsoft PowerPoint when processing a malformed picture inde...