Microsoft Office 2013 Token Hijacking Information Disclosure (MS13-104; CVE-2013-5054)

An information disclosure vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles specially crafted responses. A remote attacker can exploit this issue by enticing a victim to open an Office file hosted on a malicious website...

Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable PE files. A remote attacker could trigger this flaw by sending a...

NTP Servers Monlist Command Denial of Service (CVE-2013-5211)

There exists a design flaw in NTP servers that can allow attackers to perform DoS attacks against target machines. A remote attacker can leverage this flaw by sending a specially crafted request to an affected NTP server...

Suspicious JavaScript Encoding

Certain evasion tools can obfuscate JavaScript code in order to circumvent security software. Successful exploitation could allow attackers to execute arbitrary code on the target...

JavaScript Payload Encoding

Certain JavaScript obfuscation schemes can be used to circumvent security software. These methods could allow attackers to execute arbitrary code on a target machine...

Adobe Flash Player Type Confusion Arbitrary Code Execution (APSB13-28; CVE-2013-5331)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

RealNetworks RealPlayer RMP File Heap Buffer Overflow (CVE-2013-6877)

A heap buffer overflow exists in RealNetworks RealPlayer. The vulnerability is due an error when handling RMP files, overly long values for certain tags can result in a heap buffer overflow. A remote unauthenticated attacker could exploit this vulnerability by enticing a user to open a crafted RM...

Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)

A local file include vulnerability has been reported in Zimbra Collaboration Server. The vulnerability is due to insufficient validation of user-supplied input. A remote attacker can exploit this vulnerability to retrieve sensitive information like LDAP root credentials...

GeoBlog viewcat.php cat Parameter SQL Injection - Ver2 (CVE-2006-0249)

An SQL injection vulnerability has been reported in BitDamaged geoBlog MOD1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

VEGO Web Forum index.php theme_id Parameter SQL Injection - Ver2 (CVE-2006-0065)

An SQL injection vulnerability has been reported in VEGO Web Forum. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)

A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Site-Assistant menu.php pathsversion Parameter PHP Code Execution - Ver2 (CVE-2007-0867)

A remote code execution vulnerability has been reported in Site-assistant. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

AINS function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0570)

A code execution vulnerability has been reported in Johannes Gijsbers Ad Fundum Integratable News Script AINS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OABOARD Web Forum forum.php inc Parameter PHP Code Execution - Ver2 (CVE-2006-0076)

A code execution vulnerability has been reported in OABoard. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WU-FTPD File Globbing Denial Of Service - Ver2 (CVE-2005-0256)

A denial-of-service vulnerability has been reported in wu-ftpd. A remote attacker could trigger this vulnerability via a glob pattern with a large number of wildcard characters as demonstrated using the dir command. Successful exploitation of this vulnerability would allow a remote attacker to...

InTouch index.php user Parameter SQL Injection - Ver2 (CVE-2006-0088)

An SQL injection vulnerability has been reported in inTouch. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Internet Explorer Improper Ref Counting Use After Free (MS12-077) - Ver2 (CVE-2012-4787)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a target user to ope...

Internet Explorer Table Row Object Memory Corruption (MS09-019) - Ver2 (CVE-2009-1141)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability occurs when Internet Explorer displays a Web page that contains certain unexpected method calls to HTML objects, system...

PHPLiveHelper global.php abs_path Parameter PHP Code Execution - Ver2 (CVE-2006-4051)

A code execution vulnerability has been reported in Turnkey Web Tools PHP Live Helper. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Wordcircle index.php password Parameter SQL Injection - Ver2 (CVE-2006-0205)

An SQL injection vulnerability has been reported in Wordcircle. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

PHPAuction view.inc.php phpAds_path Parameter PHP Code Execution - Ver2 (CVE-2006-3984)

A code execution vulnerability has been reported in Albasoftware PHPauction. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

IRSR pageheaderdefault.inc.php sysSessionPath Parameter PHP Code Execution - Ver2 (CVE-2006-4237)

A code execution vulnerability has been reported in Invisionix Roaming System Remote IRSR. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

FlashGameScript index.php func Parameter PHP Code Execution - Ver2 (CVE-2007-1078)

A code execution vulnerability has been reported in FlashGameScript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle 9i TNS Listener SERVICE_NAME Remote Buffer Overflow - Ver2 (CVE-2002-0965)

A buffer overflow vulnerability has been reported in TNS Listener for Oracle 9i Database Server on Windows systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Flashchat aedating4CMS.php dirinc Parameter PHP Code Execution - Ver2 (CVE-2006-4583)

A code execution vulnerability has been reported in FlashChat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

FreeBSD Remote NFS RPC Request Denial of Service - Ver2 (CVE-2006-0900)

A denial of service vulnerability was detected in FreeBSD. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)

An SQL injection vulnerability has been reported in Cybozu Garoon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Multiple SSH2 Products Response Buffer Overflow - Ver2 (CVE-2002-1359)

A buffer overflow vulnerability has been reported in multiple SSH2 servers and clients. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TSEP colorswitch.php tsep_configabsPath Parameter PHP Code Execution - Ver2 (CVE-2006-3993)

A code execution vulnerability has been reported in Olaf Noehring The Search Engine Project TSEP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PollMentor pollmentorres.asp id Parameter SQL Injection - Ver2 (CVE-2007-0984)

An SQL injection vulnerability has been reported in PollMentor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

PhpSecurePages secure.php cfgProgDir Parameter PHP Code Execution - Ver2 (CVE-2001-1468)

A code execution vulnerability has been reported in phpSecurePages. A remote attacker could trigger this vulnerability by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code. Successful exploitation of this vulnerability could allow a remote attacke...

Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)

A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

phpMYAdmin goto Parameter PHP Code Execution - Ver2 (CVE-2001-0478)

A code execution vulnerability has been reported in phpMYAdmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Solaris rwalld Format String - Ver2 (CVE-2002-0573)

A format string vulnerability has been reported in Sun Solaris. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Empire CMS checklevel.php check_path Parameter PHP Code Execution - Ver2 (CVE-2006-4354)

A code execution vulnerability has been reported in Phome Empire CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Bit 5 Blog processlogin.php username Parameter SQL Injection - Ver2 (CVE-2006-0320)

An SQL injection vulnerability has been reported in Bit 5 Blog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Internet Explorer Keystroke Hijack Information Disclosure - Ver2 (CVE-2006-2900)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

MyPhPim calendar.php3 cal_id Parameter SQL Injection - Ver2 (CVE-2006-0167)

An SQL injection vulnerability has been reported in MyPhPim. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

MySQL Commander dbopen.php home Parameter PHP Code Execution - Ver2 (CVE-2007-1439)

A code execution vulnerability has been reported in bitesser MySQL Commander. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Ultimate PHP Board User-Agent HTTP Header Code Execution - Ver2 (CVE-2003-0395)

A code execution vulnerability has been reported in Ultimate PHP Board. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

NetWin SurgeMail Webmail Server page Parameter Format String - Ver2 (CVE-2008-1055)

A format string vulnerability has been reported in NetWin SurgeMail and WebMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mozilla Firefox Javascript XBL Compilation Code Execution - Ver2 (CVE-2006-1733)

A code execution vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apple Safari Webkit Floating Point Data Type Code Execution - Ver2 (CVE-2010-1807)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

Mozilla Firefox CSS Border Width Memory Corruption - Ver2 (CVE-2006-1739)

A memory corruption vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla Seamonkey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OPENi-CMS Plugin index.php oi_dir Parameter PHP Code Execution - Ver2 (CVE-2007-0881)

A code execution vulnerability has been reported inSeitenschutz plugin for OPENi-CMS 1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Novell Client NetIdentity Agent Remote Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)

The Novell NetIdentity agent works with eDirectory authentication to provide background authentication to Windows Web-based applications that require eDirectory authentication, such as iPrint, Novell Portal Services, eGuide, Novell NetIdentity, ZENworks, NetStorage, and iManager. NetIdentity...

Mac OS X Safari x-man-page URI Terminal Escape Command Execution - Ver2 (CVE-2005-1342)

A command execution vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Sabdrimer advanced1.php pluginpath0 Parameter CMS PHP Code Execution - Ver2 (CVE-2006-3520)

A code execution vulnerability has been reported in Sabdrimer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

AnnoncesV annonce.php page Parameter PHP Code Execution - Ver2 (CVE-2006-4622)

A code execution vulnerability has been reported in AnnonceV. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Saphplesson id Parameter SQL Injection - Ver2 (CVE-2006-2835)

An SQL injection vulnerability has been reported in Saphplesson. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...