Web Browsers CookieBomb Cookie Injection

A Cookie injection vulnerability exists in several web browsers. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted website. Successful exploitation could result in arbitrary code execution and possibly allow malware download to the target user...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0286)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Web Browsers iFrame Tag Injection

A code injection vulnerability exists in several web browsers. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted website. Successful exploitation could result in arbitrary code execution and possibly allow malware download to the target user...

Ingres Database iidbms Heap Overflow - ver 2

Ingres Database is a relational database product available for both Windows and Unix-like platforms. A vulnerability has been reported in Ingres Database that could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is due to insufficient boundary checking in th...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0274)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0283)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0277)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0272)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0273)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft XML Core Services Information Disclosure (MS14-005; CVE-2014-0266)

An information-disclosure vulnerability has been reported in Microsoft XML Core Services. The vulnerability is caused when Internet Explorer does not properly enforce cross-domain policies, allowing an attacker to access content from different domains. An attacker could exploit the vulnerability ...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0269)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user t...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0284)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0278)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user t...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0289)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0288)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0287)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0290)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0279)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user t...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0267)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0276)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0271)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0270)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0275)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Graphics Component Memory Corruption (MS14-007; CVE-2014-0263)

A remote code execution vulnerability has been reported in Windows Graphics Component. The vulnerability is due to the way Windows components handle specially crafted GIF files. A remote attacker can exploit this issue by enticing a user to view GIF files in shared content. Successful exploitatio...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0281)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user t...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0285)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Adobe Flash Player Integer Underflow Remote Code Execution (APSB14-04: CVE-2014-0497)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer underflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...

Oracle Fusion Middleware Showenv Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)

An information disclosure vulnerability has been reported in the Oracle Reports component of Oracle Fusion Middleware. The vulnerability is due to incorrect website configuration that could allow a remote attacker to execute unauthenticated network attacks over HTTP...

Oracle Fusion Middleware Showmap Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)

An information disclosure vulnerability has been reported in the Oracle Reports component of Oracle Fusion Middleware. The vulnerability is due to incorrect website configuration that could allow a remote attacker to execute unauthenticated network attacks over HTTP...

Flashchat aedating4CMS.php dirinc Parameter PHP Code Execution - Ver2 (CVE-2006-4583)

A code execution vulnerability has been reported in FlashChat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle Database Server AUTH_SESSKEY Stack Buffer Overflow - Ver2 (CVE-2009-1979)

A buffer overflow vulnerability has been reported in the Oracle Database server. The vulnerability is due to an error in the Oracle Database server that fails to sufficiently validate the length field of the AUTHSESSKEY parameter. A remote attacker could exploit this vulnerability by sending...

PHP POST File Upload PHP GLOBALS Variable Overwrite Security Bypass - Ver2 (CVE-2005-3390)

A security bypass vulnerability has been reported in PHP. A remote attacker could exploit this vulnerability via a multipart/form-data POST request with a "GLOBALS" fileupload field. Successful exploitation of this vulnerability could allow a remote attacker to bypass security protections of PHP...

GNU Wget Arbitrary File Download

GNU Wget is a computer program that allows users to retrieve content from web servers. The program can be used by attackers to download arbitrary files via a specially crafted HTTP request...

Mozilla Firefox New Function Garbage Collection Code Execution - Ver2 (CVE-2006-3803)

A code execution vulnerability has been reported in Mozilla Firefox. A remote attacker could trigger this vulnerability by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object. Successful exploitation of this...

FlashGameScript index.php func Parameter PHP Code Execution - Ver2 (CVE-2007-1078)

A code execution vulnerability has been reported in FlashGameScript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer Keystroke Hijack Information Disclosure - Ver2 (CVE-2006-2900)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Internet Explorer mdsauth.dll Arbitrary File Overwrite - Ver2 (CVE-2007-2221)

A file overwrite vulnerability have been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to create or overwrite arbitrary files on the affected system...

Empire CMS checklevel.php check_path Parameter PHP Code Execution - Ver2 (CVE-2006-4354)

A code execution vulnerability has been reported in Phome Empire CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHPAuction view.inc.php phpAds_path Parameter PHP Code Execution - Ver2 (CVE-2006-3984)

A code execution vulnerability has been reported in Albasoftware PHPauction. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)

A code execution vulnerability has been reported in Vincenzo Valvano Comet WebFileManager CWFM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Computer Associates BrightStor ARCServe BackUp xdr_handle_t Code Execution - Ver2 (CVE-2007-1785)

A code execution vulnerability has been reported in BrightStor ARCserve Backup service. The vulnerability is due to an input validation error within mediasvr. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle 9i HTTP Server Web Administration Access Privilege Escalation - Ver2 (CVE-2002-0561)

A privilege escalation vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

ME Download System header.php Parameter PHP Code Execution - Ver2 (CVE-2006-4053)

A code execution vulnerability has been reported in ME Download System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer DHTML Object Memory Corruption - Ver2 (CVE-2009-1141)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle 9i TNS Listener SERVICE_NAME Remote Buffer Overflow - Ver2 (CVE-2002-0965)

A buffer overflow vulnerability has been reported in TNS Listener for Oracle 9i Database Server on Windows systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mozilla Firefox Event Handler Privilege Escalation - Ver2 (CVE-2007-3737)

A privilege escalation vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

System V TTYPROMPT Buffer Overflow - Ver2 (CVE-2001-0797)

A buffer overflow vulnerability has been reported in various System V based operating systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

WebBBS webbbs_config.pl followup Parameter Command Execution - Ver2 (CVE-2002-1993)

A command execution vulnerability has been reported in WebBBS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Postguestbook CONF_CONFIG_PATH Parameter PHP Code Execution - Ver2 (CVE-2007-1372)

A code execution vulnerability has been reported in Postguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Multiple SSH2 Products Response Buffer Overflow - Ver2 (CVE-2002-1359)

A buffer overflow vulnerability has been reported in multiple SSH2 servers and clients. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...