active library explorer vulnerabilities and exploits

(subscribe to this query)

XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.

Ericsson Active Library Explorer 14.3

Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "...

Microsoft Windows 98se Microsoft Windows Me Microsoft Windows Nt 4.0 Microsoft Windows 2003 Server R2 Microsoft Windows 98 Microsoft Windows 2000 Microsoft Windows 2003 Server 64-bit Microsoft Windows Xp

1 EDB exploit

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, a...

Microsoft Windows 2003 Server -Microsoft Windows Xp -Microsoft Windows Xp

2 EDB exploits

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote malicious users to obtain sensitive informatio...

Microsoft Visual Studio .net 2003 Microsoft Visual C\\+\\+ 2008 Microsoft Visual Studio 2008 Microsoft Visual Studio 2005 Microsoft Visual C\\+\\+ 2005

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not...

Microsoft Visual Studio 2008 Microsoft Visual Studio .net 2003 Microsoft Visual Studio 2005 Microsoft Visual C\\+\\+ 2008 Microsoft Visual C\\+\\+ 2005

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; ...

Microsoft Visual C\\+\\+ 2005 Microsoft Visual C\\+\\+ 2008 Microsoft Windows Vista -Microsoft Windows Vista Microsoft Windows Xp Microsoft Windows Server 2008 -Microsoft Windows 2003 Server Microsoft Windows 2000 Microsoft Windows Server 2008 Microsoft Visual Studio 2008 Microsoft Visual Studio 2005 Microsoft Visual Studio 2003

1 Article

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsib...

2 Metasploit modules6 Github repositories1 Article

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook