13538 matches found
Belkin Linksys WRT54G / WRT54GS apply.cgi POST Request Buffer Overflow (CVE-2005-2799)
A stack buffer overflow vulnerability has been reported in Belkin Linksys WRT54G and WRT54GS wireless routers...
Novell ZENworks Configuration Management umaninv Information Disclosure (CVE-2013-1084)
An information disclosure vulnerability exists in Novel ZENworks Configuration Management...
Adobe Reader And Acrobat PDF Memory Corruption (CVE-2009-1859)
A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to insufficient boundary check when parsing the COD tag of an embedded JP2 file. A remote attacker can exploit this weakness by enticing the host to open a specially crafted PDF file with an...
GNOME Vino VNC Server Denial of Service (CVE-2013-5745)
A denial of service vulnerability exists in GNOME Vino VNC Server. The vulnerability is caused by an infinite loop error in the rfbProcessClientMessage function in rfbserver.c.The vulnerability is due to improper handling of input which results in a loop with an unreachable exit condition.A remot...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3914)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Information Disclosure (MS13-088: CVE-2013-3908)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer...
ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043 ; CVE-2011-4044; CVE-2011-4045)
A buffer overflow vulnerability has been reported in SCADA ARC PcVue...
Microsoft Graphics Device Interface Integer Overflow (MS13-089; CVE-2013-3901)
A remote code execution vulnerability has been reported in the Windows Graphics Device Interface GDI...
Microsoft Outlook MIME Email Message Parsing Remote Code Execution (MS13-068; CVE-2013-3870; CVE-2013-3905)
A remote code execution vulnerability exists in Microsoft Office Outlook email client...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3871)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Supermicro IPMI Firmware CGI Scanner Remote Code Execution (CVE-2013-3621; CVE-2013-3623)
A buffer overflow vulnerability has been reported in the Supermicro IPMI Firmware. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Exploitation of these vulnerabilities may result in remote code execution as the root user account...
Supermicro Onboard IPMI Static SSL Certificate Scanner Information Disclosure (CVE-2013-3619)
An SSL keys handling flaw has been reported in Supermicro IPMI firmware...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3912)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3911)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3915)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution (MS13-090; CVE-2013-3918)
A remote code execution vulnerability exists in the InformationCardSigninHelper Class ActiveX control, icardie.dll...
Supermicro Onboard IPMI Authenticated Directory Traversal
A directory traversal vulnerability has been reported in Supermicro Onboard IPMI. The vulnerability is due to lack of sanitization of the URL parameters. A remote attacker could exploit this vulnerability by sending a crafted request to an affected server. Successful exploitation may allow an...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3917)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3910)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3916)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer...
Microsoft Word WPD Remote Code Execution (MS13-091; CVE-2013-1324; CVE-2013-1325)
A remote code execution vulnerability exists in the way that affected Microsoft Office software parses WordPerfect files. The vulnerability is caused when Microsoft Office does not properly process a specially crafted WordPerfect file. Exploitation of this vulnerability requires a user to open a...
Oracle Outside In OS 2 Metafile Parser stack buffer overflow (CVE-2013-5763; CVE-2013-5879)
A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to a boundary error while processing OS/2 Metafiles. Oracle Outside-In is embedded in many enterprise applications. This vulnerability can be exploited ...
Apache Tomcat Chunked Transfer Denial of Service - Ver 2 (CVE-2012-3544)
A denial of service vulnerability has been identified in Apache Tomcat as it processes Chunked-Transfer encoded requests. The error is caused by Tomcat not discarding any extensions included in very long Chunked-transfer requests, even if they were not processed. A remote attacker could exploit...
Belkin Linksys E1500/E2500 Remote Command Execution
A remote command execution vulnerability exists in multiple Belkin Linksys routers. The vulnerability is due to improper input validation in the router's Web interface. A remote attacker could exploit this vulnerability by sending a malicious HTTP request to the victim. Successful exploitation of...
Microsoft Office Embedded TIFF Image Remote Code Execution (CVE-2013-3906)
A remote code execution vulnerability has been reported in a graphic rendering library used by Microsoft Office products...
Horde Groupware Webmail Edition Ingo Filter Cross-Site Request Forgery (CVE-2013-6275)
A Cross-Site Request Forgery CSRF vulnerability has been reported in Horde Groupware Webmail Edition. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by convincing the user to follow a malicious link or visit an attacker...
Corel PDF Fusion XPS Stack Buffer Overflow (CVE-2013-3248)
A code execution vulnerability exists in Corel PDF Fusion...
IBM iNotes ActiveX Control Integer Overflow (CVE-2013-3027)
A buffer overflow vulnerability has been reported in IBM iNotes...
Double Executable File Extension Arbitrary File Execution
Certain malicious executable files can be hidden using double extension filenames...
GE Intelligent Platforms Proficy SCADA Substitute.bcl Directory Traversal (CVE-2013-0653)
A directory traversal vulnerability has been reported in GE Intelligent Platforms Proficy...
Belkin Linksys WRT110 Remote Command Execution (CVE-2013-3568)
A remote command execution vulnerability has been reported in Belkin Linksys WRT110 firmware. The vulnerability is due to the Web interface's failure to sanitize ping targets as well as a lack of CSRF tokens. A remote attacker could exploit this vulnerability by sending a malicious HTTP request t...
HP ProCurve Manager SNAC UpdateCertificatesServlet Code Execution (CVE-2013-4812)
A remote code execution vulnerability has been reported in HP ProCurve Manager SNAC...
HP Intelligent Management Center BIMS UploadServlet Arbitrary File Upload (CVE-2013-4822)
A code execution vulnerability exists in the Branch Intelligent Management Software BIMS module of Intelligent Management Center...
WikkaWiki Spam Logging PHP Injection (CVE-2011-4449)
A code execution vulnerability has been reported in WikkaWiki version 1.3.2...
Titan FTP Administrative Password Disclosure
A password disclosure vulnerability has been reported in Titan FTP Server Administrator...
Siemens Simatic SCADA WINCC SQL Insecure Default Credentials Security Bypass (CVE-2010-2772)
A security bypass vulnerability has been reported in Siemens SIMATIC WinCC server. A remote attacker can exploit this issue by using the default hard-coded password to bypass certain security restrictions and gain access to the application's database...
Apache Web Server Darkleech Landing Page Stage Code Execution
A website redirection vulnerability has been reported in Apache web servers.Remote attackers can use Darkleech landing page hosted on Apache web server to redirect victims to a malicious URL. Successful redirection will allow the attacker to download malware to the target...
Egg Hunting Staged Shellcode High Ports Remote Code Execution
Egg Hunting is a staged shellcode technique. A remote attacker can use Egg Hunting to cause a stack-based overflow on the target. Successful implementation will allow attackers to execute shellcode on a remote machine...
OpenX Ad Server Backdoor PHP Code Execution (CVE-2013-4211)
A Code Execution vulnerability has been reported in OpenX Ad Server. The vulnerability is due to the existence of a backdoor within the flowplayer-3.1.1.min.js library. A remote attacker could exploit this vulnerability by sending a malicious request to the server. Successful exploitation could...
Egg Hunting Staged Shellcode Remote Code Execution
Egg Hunting is a staged shellcode technique. A remote attacker can use Egg Hunting to cause a stack-based overflow on the target. Successful implementation will allow attackers to execute shellcode on a remote machine...
Log1 CMS writeInfo() PHP Code Injection (CVE-2011-4825)
A PHP code injection vulnerability has been reported in the "Ajax File and Image Manager" component in log1 CMS. A remote attacker could inject arbitrary PHP code into data.php via crafted parameters...
OpenSSH maxstartup Threshold Connection Exhaustion Denial of Service - ver 2 (CVE-2010-5107)
A denial of service vulnerability exists in the OpenSSH server daemon sshd. The vulnerability is due to a default configuration that only allows a small number of unauthenticated connections, after which the server will stop accepting any new connections. A remote unauthenticated attacker can...
VMware vCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload (CVE-2013-3520)
An Arbitrary File Upload vulnerability has been reported in VMware vCenter Chargeback Manager...
Digium Asterisk SIP Terminated Channel ACK with SDP Denial of Service (CVE-2013-5641)
A denial of service vulnerability exists in Asterisk Open Source and Certified Asterisk...
Graphite Web Unsafe Module Handling Code Execution (CVE-2013-5093)
A command injection vulnerability has been reported in Graphite Web...
Corel PaintShop Pro Insecure Library Loading (CVE-2013-0733)
A code execution vulnerability exists in Corel's PaintShop Pro...
HP Data Protector CRS Opcode 1091 Stack Buffer Overflow (CVE-2013-2334)
A stack buffer overflow has been reported in HP Data Protector...
BlackHole Toolkit v2 JAVA Payload Stage Code Execution (CVE-2012-0507; CVE-2012-1723; CVE-2013-0422; CVE-2013-0431; CVE-2013-1493)
BlackHole is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with BlackHole by enticing them to visit a malicious web page. Successful infection will allow the attacker to download additional malware to the target...