13538 matches found
Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
A code execution vulnerability has been reported in Oracle Java. The vulnerability is due to an access control failure in the com.sun.jmx.mbeanserver package and in the invokeWithArguments method of the java.lang.invoke.MethodHandle class. A remote attacker could trigger this vulnerability by usi...
Orbit Downloader URL Parameter Buffer Overflow - Ver2 (CVE-2009-0187)
A buffer overflow vulnerability has been reported in Orbit Downloader. The vulnerability is due to insufficient boundary checking in the URL string processing. A remote attacker could exploit this vulnerability by enticing a target user to open a malicious long URL. Successful exploitation of thi...
DaumGame ActiveX Buffer Overflow (CVE-2013-7246)
A buffer overflow vulnerability exists in the DaumGame ActiveX control. A remote attacker can exploit this vulnerability by enticing a user to visit a malicious website. Successful exploitation could allow arbitrary code execution in the context of the target user...
WU-FTPD File Globbing Denial Of Service - Ver2 (CVE-2005-0256)
A denial-of-service vulnerability has been reported in wu-ftpd. A remote attacker could trigger this vulnerability via a glob pattern with a large number of wildcard characters as demonstrated using the dir command. Successful exploitation of this vulnerability would allow a remote attacker to...
Microsoft IIS ASP Engine HTMLEncode Buffer Overflow - Ver2 (CVE-2008-0075)
A buffer overflow vulnerability has been reported in the Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
TheWebForum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0135)
An SQL injection vulnerability has been reported in TheWebForum twf. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Empire CMS checklevel.php check_path Parameter PHP Code Execution - Ver2 (CVE-2006-4354)
A code execution vulnerability has been reported in Phome Empire CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
FlashGameScript index.php func Parameter PHP Code Execution - Ver2 (CVE-2007-1078)
A code execution vulnerability has been reported in FlashGameScript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
GeoBlog viewcat.php cat Parameter SQL Injection - Ver2 (CVE-2006-0249)
An SQL injection vulnerability has been reported in BitDamaged geoBlog MOD1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Flashchat aedating4CMS.php dirinc Parameter PHP Code Execution - Ver2 (CVE-2006-4583)
A code execution vulnerability has been reported in FlashChat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Mozilla Firefox New Function Garbage Collection Code Execution - Ver2 (CVE-2006-3803)
A code execution vulnerability has been reported in Mozilla Firefox. A remote attacker could trigger this vulnerability by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object. Successful exploitation of this...
AJ Dating view_profile.php user_id Parameter SQL Injection - Ver2 (CVE-2007-1297)
An SQL injection vulnerability has been reported in AJ Dating. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Indexing Service Loop Counter Underwrap Code Execution - Ver2 (CVE-2009-2507)
A remote code execution vulnerability has been reported in the Microsoft Indexing Service. A remote attacker could exploit this vulnerability by enticing a user to visit a malicious Web page. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on...
Sun Java Web Start JRE Buffer Overflow - Ver2 (CVE-2007-3655)
A buffer overflow vulnerability has been reported in Sun JRE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SaveWebPortal SITE_Path Parameter PHP Code Execution - Ver2 (CVE-2005-2687)
A code execution vulnerability has been reported in SaveWebPortal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PHPAuction view.inc.php phpAds_path Parameter PHP Code Execution - Ver2 (CVE-2006-3984)
A code execution vulnerability has been reported in Albasoftware PHPauction. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)
An SQL injection vulnerability has been reported in Cybozu Garoon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Wordcircle index.php password Parameter SQL Injection - Ver2 (CVE-2006-0205)
An SQL injection vulnerability has been reported in Wordcircle. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
IBM Personal Communications WorkStation File Processing Buffer Overflow (CVE-2012-0201)
A stack-based buffer overflow vulnerability exists in IBM Personal Communications. The vulnerability is caused by improper bounds checking in pcspref.dll. By enticing a target user to open a specially-crafted WorkStation .ws file, a remote attacker could exploit this vulnerability to execute...
MSXML Response Handling Memory Corruption - Ver2 (CVE-2010-2561)
A memory corruption vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due to a bug in the way MSXML handles HTTP responses. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apple Safari Webkit Use-After-Free Code Execution- Ver2 (CVE-2010-1807)
A code execution vulnerability has been reported in Apple Safari's WebKit. The vulnerability is due to a design error when processing floating point data types. A remote attacker could trigger this vulnerability by enticing a vulnerable target to access a specially crafted HTML document. Successf...
TinyPHPForum action.php txt Parameter Cross-Site Scripting - Ver2 (CVE-2006-0102)
A cross-site scripting vulnerability has been reported in TinyPHPForum. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary script into the affected system...
Microsoft Internet Explorer Table Layout Column Memory Corruption - Ver2 (CVE-2010-0244)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker could exploit this vulnerability by accessing an object that...
MediaWiki Input Validation Remote Code Execution (CVE-2014-1610)
A remote code execution vulnerability has been reported in MediaWiki. The vulnerability is due to improper validation of user data. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to the target...
Microsoft SharePoint Calendar Cross-Site Scripting - Ver2 (CVE-2011-0653)
A cross-site scripting vulnerability has been reported in SharePoint 2010. The vulnerability is due to insufficient validation of user input to the calendar object by an affected SharePoint server. A remote attacker could exploit this vulnerability by enticing unsuspecting users to open a special...
Fourtwosevenbb Cookie-based Authentication Bypass - Ver2 (CVE-2006-0153)
An authentication bypass vulnerability has been reported in 427BB Fourtwosevenbb. A remote attacker could trigger this vulnerability by using a valid username and usertype and setting the authenticated cookie. Successful exploitation of this vulnerability would allow remote attackers to gain...
Viscom Software Movie Player Pro ActiveX Control Buffer Overflow - Ver2 (CVE-2010-0356)
A buffer overflow vulnerability has been reported in Viscom Software Movie Player Pro SDK. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
GNUTurk mods.php t_id Parameter SQL Injection - Ver2 (CVE-2006-4867)
An SQL injection vulnerability has been reported in GNUTurk. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Modernbill config.php DIR Parameter PHP Code Execution - Ver2 (CVE-2006-4034)
A code execution vulnerability has been reported in ModernGigabyte ModernBill. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
G-neric Generic MembreManager.php include-path Parameter PHP Code Execution - Ver2 (CVE-2007-0584)
A code execution vulnerability has been reported in G-neric Php Generic Library And Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
RealPlayer CDDA URI Code Execution - Ver2 (CVE-2010-3747)
A code execution vulnerability has been reported in RealNetworks RealPlayer ActiveX control.RealPlayer. The vulnerability is due to access to uninitialized memory during processing of CDDA URIs. A remote attacker could exploit this vulnerability by enticing a target user to open a crafted web fil...
MF Piadas admin.php page Parameter PHP Code Execution - Ver2 (CVE-2006-3323)
A cross-site scripting vulnerability has been reported in MF Piadas. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Mozilla Firefox Javascript XBL.method.eval Code Execution - Ver2 (CVE-2006-1735)
A code execution vulnerability has been reported in Mozilla Firefox. A remote attacker could trigger this vulnerability by using an eval in an XBL method binding XBL.method.eval to create Javascript functions that are compiled with extra privileges. Successful exploitation of this vulnerability...
Microsoft Sharepoint Path Info Cross-Site Scripting - Ver2 (CVE-2007-2581)
A cross-site scripting vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to lack of input validation when processing URL requests. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary web script or HTML into the affected...
Cisco Secure ACS LogonProxy.cgi Cross-Site Scripting - Ver2 (CVE-2006-3101)
A cross-site scripting vulnerability has been reported in Cisco Secure Access Control Server Solution Engine. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary web script or HTML into the affected system...
Boite de News index.php url_index Parameter PHP Code Execution - Ver2 (CVE-2006-4123)
A code execution vulnerability has been reported in Boite de News. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Rule Use After Free - Ver2 (CVE-2010-3328)
A use-after-free vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. A remote attacker could trigger this vulnerability by setting an unspecified property of a...
Fourtwosevenbb showthread.php ForumID Parameter SQL Injection - Ver2 (CVE-2006-0154)
An SQL injection vulnerability has been reported in 427BB Fourtwosevenbb. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
BakBone NetVault Messages Buffer Overflow - ver 2 (CVE-2005-1009)
A remote code execution vulnerability exists in BakBone NetVault. The vulnerability is caused due to insufficient boundary checking in the communication handling code of both the client and server components. A simple attack will result in an unexpected termination of the target service, creating...
Activist Mobilization Platform base.php base_path Parameter PHP Code Execution - Ver2 (CVE-2007-1571)
A code execution vulnerability has been reported in Radical Designs Activist Mobilization Platform AMP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ACGVclick function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0577)
A code execution vulnerability has been reported in ACGVclick. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Light Weight Calendar index.php date Parameter PHP Code Execution - Ver2 (CVE-2006-0206)
A code execution vulnerability has been reported in Light Weight Calendar. The vulnerability is due to the application does not validating the 'date' variable upon submission to the 'index.php' script. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrar...
Netscape Server WP Tag Directory Travaersal - Ver2 (CVE-2000-0236)
A directory traversal vulnerability has been reported in Netscape Enterprise Server. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
WoWRoster subdir Parameter PHP Code Execution - Ver2 (CVE-2006-3997)
A code execution vulnerability has been reported in WoWRoster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Turnkey Web Tools PHP Simple Shop abs-path Parameter PHP Code Execution - Ver2 (CVE-2006-4052)
A file inclusion vulnerability has been reported in Turnkey Web Tools PHP Simple Shop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Foro Domus escribir.php email Parameter Cross-Site Scripting - Ver2 (CVE-2006-0110)
A cross-site scripting vulnerability has been reported in Foro Domus. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary script into the affected system...
PHP DateInterval Heap Buffer Overread Denial of Service (CVE-2013-6712)
A denial of service vulnerability has been reported in PHP. The vulnerability is due to a buffer overread when creating a dateInterval object. A remote attacker can exploit this flaw by sending a malicious request. Successful exploitation could result in a denial of service condition...
VERITAS NetBackup vmd Shared Library Buffer Overflow - ver 2 (CVE-2005-3116)
The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...
Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable PE files. A remote attacker could trigger this flaw by sending a...