13538 matches found
WU-FTPD File Globbing Denial Of Service - Ver2 (CVE-2005-0256)
A denial-of-service vulnerability has been reported in wu-ftpd. A remote attacker could trigger this vulnerability via a glob pattern with a large number of wildcard characters as demonstrated using the dir command. Successful exploitation of this vulnerability would allow a remote attacker to...
Oracle Database Server AUTH_SESSKEY Stack Buffer Overflow - Ver2 (CVE-2009-1979)
A buffer overflow vulnerability has been reported in the Oracle Database server. The vulnerability is due to an error in the Oracle Database server that fails to sufficiently validate the length field of the AUTHSESSKEY parameter. A remote attacker could exploit this vulnerability by sending...
Chimera Web Portal System linkcategory.php id Parameter SQL Injection - Ver2 (CVE-2006-0137)
An SQL injection vulnerability has been reported in Phanatic Softwares Chimera Web Portal System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Mac OS X Safari x-man-page URI Terminal Escape Command Execution - Ver2 (CVE-2005-1342)
A command execution vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft OpenType Font Index Privilege Escalation - Ver2 (CVE-2010-3956)
A privilege escalation vulnerability has been reported in the OpenType Font OTF format driver. The vulnerability is due to an error in the OpenType Font OTF format driver that fails to properly index an array when parsing OpenType fonts. A remote attacker could exploit this vulnerability via a...
OPENi-CMS Plugin index.php oi_dir Parameter PHP Code Execution - Ver2 (CVE-2007-0881)
A code execution vulnerability has been reported inSeitenschutz plugin for OPENi-CMS 1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Novell Client EnumPrinters Buffer Overflow - Ver2 (CVE-2008-0639)
A buffer overflow vulnerability has been reported in Novell Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ScozBook auth.php adminname Parameter SQL Injection - Ver2 (CVE-2006-0079)
An SQL injection vulnerability has been reported in ScozNet ScozBook BETA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
PSlash Web Portal index.php Code Execution - Ver2 (CVE-2001-1235)
A code execution vulnerability has been reported in PSlash Web Portal. A remote attacker could trigger this vulnerability by including files from remote web sites using an HTTP request that modifies the includedir variable. Successful exploitation of this vulnerability could allow a remote attack...
PHP POST File Upload PHP GLOBALS Variable Overwrite Security Bypass - Ver2 (CVE-2005-3390)
A security bypass vulnerability has been reported in PHP. A remote attacker could exploit this vulnerability via a multipart/form-data POST request with a "GLOBALS" fileupload field. Successful exploitation of this vulnerability could allow a remote attacker to bypass security protections of PHP...
Oracle 9i HTTP Server Globals.JSA Access Information Disclosure - Ver2 (CVE-2002-0562)
An information disclosure vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
InTouch index.php user Parameter SQL Injection - Ver2 (CVE-2006-0088)
An SQL injection vulnerability has been reported in inTouch. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft MSDE Long TCP Request Buffer Overflow - Ver2 (CVE-2002-1123)
A buffer overflow vulnerability has been reported in Microsoft MSDE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Internet Explorer mdsauth.dll Arbitrary File Overwrite - Ver2 (CVE-2007-2221)
A file overwrite vulnerability have been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to create or overwrite arbitrary files on the affected system...
MySQL Commander dbopen.php home Parameter PHP Code Execution - Ver2 (CVE-2007-1439)
A code execution vulnerability has been reported in bitesser MySQL Commander. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PHP POST File Upload Buffer Overflow - Ver2 (CVE-2002-0081)
A buffer overflow vulnerability has been reported in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft IIS ASP Engine HTMLEncode Buffer Overflow - Ver2 (CVE-2008-0075)
A buffer overflow vulnerability has been reported in the Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
AINS function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0570)
A code execution vulnerability has been reported in Johannes Gijsbers Ad Fundum Integratable News Script AINS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
IBM Personal Communications WorkStation File Processing Buffer Overflow (CVE-2012-0201)
A stack-based buffer overflow vulnerability exists in IBM Personal Communications. The vulnerability is caused by improper bounds checking in pcspref.dll. By enticing a target user to open a specially-crafted WorkStation .ws file, a remote attacker could exploit this vulnerability to execute...
Viscom Software Movie Player Pro ActiveX Control Buffer Overflow - Ver2 (CVE-2010-0356)
A buffer overflow vulnerability has been reported in Viscom Software Movie Player Pro SDK. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Netscape Server WP Tag Directory Travaersal - Ver2 (CVE-2000-0236)
A directory traversal vulnerability has been reported in Netscape Enterprise Server. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Boite de News index.php url_index Parameter PHP Code Execution - Ver2 (CVE-2006-4123)
A code execution vulnerability has been reported in Boite de News. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Table Layout Column Memory Corruption - Ver2 (CVE-2010-0244)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker could exploit this vulnerability by accessing an object that...
Fourtwosevenbb Cookie-based Authentication Bypass - Ver2 (CVE-2006-0153)
An authentication bypass vulnerability has been reported in 427BB Fourtwosevenbb. A remote attacker could trigger this vulnerability by using a valid username and usertype and setting the authenticated cookie. Successful exploitation of this vulnerability would allow remote attackers to gain...
Microsoft SharePoint Calendar Cross-Site Scripting - Ver2 (CVE-2011-0653)
A cross-site scripting vulnerability has been reported in SharePoint 2010. The vulnerability is due to insufficient validation of user input to the calendar object by an affected SharePoint server. A remote attacker could exploit this vulnerability by enticing unsuspecting users to open a special...
BakBone NetVault Messages Buffer Overflow - ver 2 (CVE-2005-1009)
A remote code execution vulnerability exists in BakBone NetVault. The vulnerability is caused due to insufficient boundary checking in the communication handling code of both the client and server components. A simple attack will result in an unexpected termination of the target service, creating...
Activist Mobilization Platform base.php base_path Parameter PHP Code Execution - Ver2 (CVE-2007-1571)
A code execution vulnerability has been reported in Radical Designs Activist Mobilization Platform AMP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MSXML Response Handling Memory Corruption - Ver2 (CVE-2010-2561)
A memory corruption vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due to a bug in the way MSXML handles HTTP responses. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Foro Domus escribir.php email Parameter Cross-Site Scripting - Ver2 (CVE-2006-0110)
A cross-site scripting vulnerability has been reported in Foro Domus. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary script into the affected system...
Microsoft Sharepoint Path Info Cross-Site Scripting - Ver2 (CVE-2007-2581)
A cross-site scripting vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to lack of input validation when processing URL requests. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary web script or HTML into the affected...
Cisco Secure ACS LogonProxy.cgi Cross-Site Scripting - Ver2 (CVE-2006-3101)
A cross-site scripting vulnerability has been reported in Cisco Secure Access Control Server Solution Engine. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary web script or HTML into the affected system...
MF Piadas admin.php page Parameter PHP Code Execution - Ver2 (CVE-2006-3323)
A cross-site scripting vulnerability has been reported in MF Piadas. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Turnkey Web Tools PHP Simple Shop abs-path Parameter PHP Code Execution - Ver2 (CVE-2006-4052)
A file inclusion vulnerability has been reported in Turnkey Web Tools PHP Simple Shop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apple Safari Webkit Use-After-Free Code Execution- Ver2 (CVE-2010-1807)
A code execution vulnerability has been reported in Apple Safari's WebKit. The vulnerability is due to a design error when processing floating point data types. A remote attacker could trigger this vulnerability by enticing a vulnerable target to access a specially crafted HTML document. Successf...
Mozilla Firefox Javascript XBL.method.eval Code Execution - Ver2 (CVE-2006-1735)
A code execution vulnerability has been reported in Mozilla Firefox. A remote attacker could trigger this vulnerability by using an eval in an XBL method binding XBL.method.eval to create Javascript functions that are compiled with extra privileges. Successful exploitation of this vulnerability...
RealPlayer CDDA URI Code Execution - Ver2 (CVE-2010-3747)
A code execution vulnerability has been reported in RealNetworks RealPlayer ActiveX control.RealPlayer. The vulnerability is due to access to uninitialized memory during processing of CDDA URIs. A remote attacker could exploit this vulnerability by enticing a target user to open a crafted web fil...
MediaWiki Input Validation Remote Code Execution (CVE-2014-1610)
A remote code execution vulnerability has been reported in MediaWiki. The vulnerability is due to improper validation of user data. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to the target...
WoWRoster subdir Parameter PHP Code Execution - Ver2 (CVE-2006-3997)
A code execution vulnerability has been reported in WoWRoster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Modernbill config.php DIR Parameter PHP Code Execution - Ver2 (CVE-2006-4034)
A code execution vulnerability has been reported in ModernGigabyte ModernBill. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
GNUTurk mods.php t_id Parameter SQL Injection - Ver2 (CVE-2006-4867)
An SQL injection vulnerability has been reported in GNUTurk. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
TinyPHPForum action.php txt Parameter Cross-Site Scripting - Ver2 (CVE-2006-0102)
A cross-site scripting vulnerability has been reported in TinyPHPForum. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary script into the affected system...
Fourtwosevenbb showthread.php ForumID Parameter SQL Injection - Ver2 (CVE-2006-0154)
An SQL injection vulnerability has been reported in 427BB Fourtwosevenbb. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
ACGVclick function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0577)
A code execution vulnerability has been reported in ACGVclick. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Rule Use After Free - Ver2 (CVE-2010-3328)
A use-after-free vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. A remote attacker could trigger this vulnerability by setting an unspecified property of a...
G-neric Generic MembreManager.php include-path Parameter PHP Code Execution - Ver2 (CVE-2007-0584)
A code execution vulnerability has been reported in G-neric Php Generic Library And Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Light Weight Calendar index.php date Parameter PHP Code Execution - Ver2 (CVE-2006-0206)
A code execution vulnerability has been reported in Light Weight Calendar. The vulnerability is due to the application does not validating the 'date' variable upon submission to the 'index.php' script. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrar...
PHP DateInterval Heap Buffer Overread Denial of Service (CVE-2013-6712)
A denial of service vulnerability has been reported in PHP. The vulnerability is due to a buffer overread when creating a dateInterval object. A remote attacker can exploit this flaw by sending a malicious request. Successful exploitation could result in a denial of service condition...
vSkimmer Point-of-Sale Terminals Server Information Disclosure
vSkimmer is a Trojan-like malware designed to infect Windows-based servers attached with payment card readers. Post infection, the malware gathers sensitive information such as Credit Card numbers and sends it back to the C server...
VERITAS NetBackup vmd Shared Library Buffer Overflow - ver 2 (CVE-2005-3116)
The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...