KLA10076 Multiple vulnerabilities in Apple iTunes

Multiple critical vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or spoof HTTPS servers. Below is a complete list of vulnerabilities 1. Vectors related to browsing the iTunes Store can be...

KLA10017 Multiple vulnerabilities in Apple QuickTime

Multiple serious vulnerabilities have been found in Apple QuickTime. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Vectors related to unknown applications can be exploited to execute arbitrary code or cause denial of service via specially...

KLA10274 ACE vulnerability in Nitro PDF

Improper memory writing was found in Nitro PDF. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PDF. Original advisories Microsoft research Exploitation Related products Nitro-PDF-Reader Nitro-Pro C...

KLA10103 LPE vulnerability in Cisco AnyConnect

A buffer overflow was found in Cisco AnyConnect. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories Cisco bulletin Exploitation Related products Cisco-AnyConnect-VPN-Client CVE list CVE-2013-1173 high Solution...

KLA10159 ACE vulnerbility in FireBird

A buffer overflow was found in FireBird. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list CVE-2013-24...

KLA10327 Vulnerabilities in Skype

An unspecified vulnerability was found in Skype. By exploiting this vulnerability malicious users can cause unknown impact via unknown vectors. Original advisories Skype changelog Related products Skype-for-Windows CVE list Solution Update to latest version Affected Products - Skype...

KLA10220 OSI vulnerability in Inkscape

A wrong directory reading was found in Inkscape. By exploiting this vulnerability malicious users can obtain sensitive information or possibly conduct other attacks. This vulnerability can be exploited locally via file operations. Original advisories - Exploitation Related products Inkscape CVE...

KLA10250 Vulnerabilities in Alt-N MDaemon

Multiple unspecified vulnerabilities were found in MDaemon. By exploiting these vulnerabilities malicious users can execute arbitrary code, bypass security restrictions, cause denial of service or obtain sensitive information. These vulnerabilities can be exploited via unknown vectors. Original...

KLA10237 ACE vulnerability in Kingsoft Writer

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RTF document. Original advisories Kingsoft bulletin Exploitation Related products Kingsoft-Writer CVE...

KLA10104 CI vulnerability in Cisco NAC Appliance

XSS vulnerabilities were found in the Cisco NAC Appliance. By exploiting this vulnerability malicious users can inject arbitrary web scripts. This vulnerability can be exploited from the network at a point related to web-auth. Original advisories Cisco bulletin Exploitation Related products...

KLA10303 SB vulnerability in RPM

Improper error handling was found in RPM. By exploiting this vulnerability malicious users can bypass signature checks. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Exploitation Related products RPM-Remote-Print-Manager CVE list CVE-2012-6088...

KLA10165 ACE vulnerability in Foxit

A boundary error was found in Foxit products. By exploiting this vulnerability malicious users can cause deanial of service and execute arbitrary code. This vulnerability can be exploited via a specially dsigned URL. Original advisories Foxit bulletin Exploitation Related products...

KLA10189 DoS vulnerability in HP PKI

An unspecified vulnerability was found in the HP PKI. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely using a process name. Original advisories - Exploitation Related products HP-PKI-ActiveX-Control-HPPKI.ocx/ CVE list...

KLA10437 RCE vulnerability in AMD Catalyst Control Center

An update spoofing vulnerability was found in AMD CCC. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via spoofing update server. Original advisories Charlie Eriksen AMD advisory Exploitation Related products...

KLA10384 RLF vulnerability in VMware View

A directory traversal vulnerability was found in VMware Viewer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories VMware bulletin Exploitation Related products VMware-View CVE list...

KLA10084 DoS vulnerability in Siemens ALM

A memory leak was found in Siemens ALM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed packets. Original advisories Siemens bulletin Exploitation Related products Automation-License-Manager CVE list...

KLA10168 DoS vulnerability in GIMP

A buffer overflow was found in GIMP. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed XWD file. Original advisories - Exploitation Public exploits exist for this...

KLA10045 ACE vulnerability in Media Player Classic

Buffer overflow was found at mplayerc.exe in Media Player Classic & Windows Media Player. Malicious can use this vulnerability to execute arbitrary code via specially designed .mp4 file. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list CVE-2007-6402 critic...

KLA10105 ACE vulnerability in CISCO Secure Desktop

Improperly downloaded binaries validation was found in Cisco Secure Desktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to WebLaunch. Original advisories Cisco bulletin Exploitation Related...

KLA10162 ACE vulnerability in FlashFXP

Buffer overflows were found in FlashFXP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed strings in listbox or combobox. Original advisories FlashFXP bulletin Exploitation Public exploits exist for th...

KLA10138 ACE vulnerability in DjVu Browser Plug-in

A buffer overflow was found in the DjVu Browser Plug-in. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed djvu file. Original advisories Changelog Exploitation Related products DjVu-Browser-Plug-In C...

KLA10299 LPE vulnerability in Prof-UIS

An untrusted path vulnerability was found in Prof-UIS. By exploiting this vulnerability malicious users can gain priveleges. This vulnerability can be exploited locally via a DLL hijack. Original advisories Changelog Exploitation Related products Prof-UIS CVE list CVE-2010-5264 high Solution Upda...

KLA10099 LPE vulnerability in Camtasia Studio

An untrusted path vulnerability was found in Camtasia Studio. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking. Original advisories - Exploitation Related products Camtasia-Studio CVE list CVE-2010-5234 high Soluti...

KLA10021 LPE vulnerability in DAEMON Tools

An unspecified vulnerability was found in the DAEMON Tools. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to path search. Via a Trojan horse. Original advisories NVD Exploitation Public exploits exist...

KLA10321 LPE vulnerability in PKZIP

An untrusted path was found in PKZIP. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Exploitation Related products PKZIP CVE list CVE-2010-5274 high Solution Update to latest version Impacts...

KLA10428 LPE vulnerability in UltraVNC

An untrusted path vulnerability was found in UltraVNC. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Exploitation Related products UltraVNC CVE list CVE-2010-5248 high Solution Update to...

KLA10431 LPE vulnerability in KeePass Password Safe

An untrusted path vulnerability was found in KeePass Password Safe. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Exploitation Related products KeePass-Password-Safe CVE list CVE-2010-5200...

KLA10029 ACE vulnerabilities in Adobe Photoshop

Buffer overflow vulnerabilities were found in Adobe Photoshop. By exploiting this vulnerability malicious users can execute arbitrary code. These vulnerabilities can be exploited from the network at a point related to an unknown application via a specially designed file or TIFF image with...

KLA10167 DoS vulnerabilities in GIMP

Multiple serious vulnerabilities have been found in GIMP. Malicious can use these vulnerabilities to cause denial of service and possibly execute arbitrary code. Below is a complete list of vulnerabilities 1. An integer overflow can be exploited remotely via a specially designed GIF; 2. A buffer...

KLA10123 SB vulnerability in Comodo Internet Security

Race conditions were found in Comodo Internet Security. By exploiting this vulnerability malicious users can bypass Defence+. This vulnerability can be exploited from the network at a point related to unknown. Original advisories Comodo release notes Exploitation Related products...

KLA10227 CI vulnerability in WhatsUp Gold

An XSS vulnerability was found in WhatsUp Gold. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

KLA10038 Multiple ACE vulnerabilities in Adobe Illustrator

Multiple serious vulnerabilities have been found in Adobe Illustrator. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service at a point related to unspecified vectors. Original advisories Adobe bulletin Exploitation Public exploits exist for this...

KLA10276 DoS vulnerability in Nokia PC Suite

A buffer overflow was found in the Nokia PC Suite. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...

KLA10075 Multiple vulnerabilities in Apple Safari

Multiple critical vulnerabilities have been found in Apple Safari. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, inject code, bypass security restrictions, spoof user interfaces or read local files. Below is a complete list of...

KLA10300 ACE vulnerability in GE IP products

A buffer overflow was found in GE IP products. By exploiting this vulnerability malicious users can execute arbitrary code and commands. This vulnerability can be exploited remotely via a specially designed input. Original advisories GE IP bulletin Exploitation Public exploits exist for this...

KLA10232 ACE vulnerability in KMPlayer

An untrusted path vulnerability was found in KMPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via dll hijacking. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

KLA10041 ACE vulnerability in Adobe Flash

An unspecified vulnerability was found in Adobe Flash Professional. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited via unknown vectors.. Original advisories Adobe bulletin Exploitation Related products Adobe-Flash-CS3 Adobe-Flash-C...

KLA10155 CI vulnerability in FeedDemon

XSS vulnerability was found in FeedDemon. By exploiting this vulnerability malicious users can inject arbitrary script. This vulnerability can be exploited remotely at a point related to the feed. Original advisories - Exploitation Related products FeedDemon CVE list CVE-2012-2634 warning Solutio...

KLA10544 Code execution vulnerabilities in Microsoft Silverlight

An unspecified vulnerabilities were found in Microsoft Silverlight. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed font data. Original advisories MS12-034 CVE-2011-3402 CVE-2012-0159...

KLA10030 ACE vulnerabilities in Adobe Photoshop

Multiple serious vulnerabilities have been found in Adobe Photoshop. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. Use-after-free vulnerability can be exploited via specially designed TIFF image. 2. Buffer overflow...

KLA10383 ACE vulnerability in VMware

Multiple critical vulnerabilities have been found in VMware. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper RPC handling can be exploited by guest OS users via specially designed...

KLA10326 ACE vulnerability in JustSystems products

A buffer overflow was found in JustSystems products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed image. Original advisories - Exploitation Related products Ichitaro-viewer Shuriken...

KLA10101 SB vulnerabilities in Cerberus FTP Server

A CSRF vulnerability was found in the Cerberus FTP Server. By exploiting this vulnerability malicious users can hijack the administrators’ auth. This vulnerability can be exploited from the network at a point related to the web interface. Original advisories - Exploitation Related products...

KLA10292 Multiple vulnerabilities in PcVue

Multiple critical vulnerabilities have been found in PcVue. Malicious users can exploit these vulnerabilities to execute arbitrary code, modify local files or cause denial of service. Below is a complete list of vulnerabilities 1. Unspecified vectors can be exploited remotely; 2. A buffer overflo...

KLA10046 ACE vulnerability in ACDSee PRO

A memory corruption vulnerability was found in the ACDSee Pro. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited at a point related to IDEACDStd.apl. via a specially designed .gif file. Original advisories report Exploitation Related...

KLA10139 Vulnerability in Dolphin Browser HD

An unspecified vulnerability was found in the Dolphin Browser HD. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited via an unknown vector. Original advisories - Exploitation Related products Dolphin-Browser-HD-for-Android CVE list...

KLA10206 ACE vulnerability in IBM Personal Communications

A buffer overflow was found in IBM Personal Communications. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ws file. Original advisories - Exploitation Public exploits exist for this vulnerability...

KLA10356 Multiple vulnerabilities in pcAnywhere

Multiple serious vulnerabilities have been found in Symantec products. Malicious users can exploit these vulnerabilities to obtain access to client information or cause denial of service. Below is a complete list of vulnerabilities 1. lack of client state control can be exploited remotely by...

KLA10062 LPE vulnerability in ALFtp

An untrusted path vulnerability was found in ALFtp. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at point related to unknown vectors. Original advisories ALtools advisory Exploitation Related products Altools-ALFTP CVE...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...