arbitrary code vulnerabilities and exploits

(subscribe to this query)

A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java components, which allows remote malicious users to execute arbitrar...

Cisco Anyconnect Secure Mobility Client 3.0

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR8 and Cisco Secure Desktop prior to 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to forc...

Cisco Anyconnect Secure Mobility Client 3.0 Cisco Secure Desktop Cisco Secure Desktop 3.1 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.27 Cisco Secure Desktop 3.1.1.33 Cisco Secure Desktop 3.1.1.45 Cisco Secure Desktop 3.2 Cisco Secure Desktop 3.2.1 Cisco Secure Desktop 3.3 Cisco Secure Desktop 3.4 Cisco Secure Desktop 3.4.1

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Code-atlantic Popup Maker 1.0.0 Code-atlantic Popup Maker 1.0.1 Code-atlantic Popup Maker 1.0.2 Code-atlantic Popup Maker 1.0.3 Code-atlantic Popup Maker 1.0.4 Code-atlantic Popup Maker 1.0.5 Code-atlantic Popup Maker 1.1.0 Code-atlantic Popup Maker 1.1.1 Code-atlantic Popup Maker 1.1.2 Code-atlantic Popup Maker 1.1.3 Code-atlantic Popup Maker 1.1.4 Code-atlantic Popup Maker 1.1.5

The WebLaunch feature in Cisco Secure Desktop prior to 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote malicious users to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSC...

Cisco Secure Desktop 3.1 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.27 Cisco Secure Desktop 3.1.1.33 Cisco Secure Desktop 3.1.1.45 Cisco Secure Desktop 3.2 Cisco Secure Desktop 3.2.1 Cisco Secure Desktop 3.3 Cisco Secure Desktop 3.4 Cisco Secure Desktop 3.4.1 Cisco Secure Desktop 3.4.2 Cisco Secure Desktop 3.4.2048

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 on Windows, and 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader ...

Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to fo...

Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4

Helix GNOME Updater helix-update 0.5 and previous versions allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.

Helix Code Gnome Updater 0.1 Helix Code Gnome Updater 0.2 Helix Code Gnome Updater 0.3 Helix Code Gnome Updater 0.4 Helix Code Gnome Updater 0.5

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote malicious users to execute arbitrary code via a long STOR command.

Code-crafters Ability Server 2.2.5 Code-crafters Ability Server 2.3.2 Code-crafters Ability Server 2.3.4

2 EDB exploits

Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote malicious users to execute arbitrary code via a long APPE command.

Code-crafters Ability Server 2.2.5 Code-crafters Ability Server 2.3.2 Code-crafters Ability Server 2.3.4

1 EDB exploit

Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote malicious users to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters.

Php Code Snippet Library Php Code Snippet Library 0.8

1 EDB exploit

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook