install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.


install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.


Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.


SQL Injection vulnerability in pay.php in millken doyocms 2.3 allows attackers to execute arbitrary code via the attribute parameter.


Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call.


Eval injection vulnerability in xdg-utils 1.1.0 RC1 when no supported desktop environment is identified allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.


Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x as used in IBM Rational Application Developer and other products allows remote attackers to execute arbitrary code via a crafted file.


Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method.


Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.


Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.


Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.


Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username.


Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters.


Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer.


Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string which is supplied to an eval function call within the do_parse_code function.


SQL Injection vulnerability in 188Jianzhan v2.1.0 allows attackers to execute arbitrary code and gain escalated privileges via the username parameter to login.php.


SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php which could let a remote malicious user execute arbitrary code.


SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php which could let a remote malicious user execute arbitrary code.


SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php which could let a remote malicious user execute arbitrary code.


SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php which could let a remote malicious user execute arbitrary code.


SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php which could let a remote malicious user execute arbitrary code.


SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter which could let a remote malicious user execute arbitrary code.


SQL Injection vulnerability in eyoucms cms v1.4.7 allows attackers to execute arbitrary code and disclose sensitive information via the tid parameter to index.php.


Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.


SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.


Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.


Argument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5 through 10.5.1 allows remote attackers to execute arbitrary code via unspecified URL schemes.


Eval

injection

vulnerability

in

in

ImpressPages

CMS

and

possibly

other

versons

before

allows

remote

attackers

to

execute

arbitrary

code

via

the

parameter.


The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer which allows attackers to execute arbitrary code via a crafted application.


Philips IntelliSpace Portal all versions of 8.0.x and 7.0.x have a vulnerability where code debugging methods are enabled which could allow an attacker to remotely execute arbitrary code during runtime.


Philips IntelliSpace Portal all versions of 8.0.x and 7.0.x have an unquoted search path or element vulnerability that has been identified which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.


Microsoft Internet Explorer 6 and 7 does not perform proper \argument validation\ during print preview which allows remote attackers to execute arbitrary code via unknown vectors aka \HTML Component Handling Vulnerability.\


myDBR 5.8.3/4262 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The component is: CSRF Token. The attack vector is: CSRF token injection to XSS.


An issue exists in uscan in devscripts before 2.13.19 which could let a remote malicious user execute arbitrary code via a crafted tarball.


An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.


An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory allowing attackers to execute arbitrary code via crafted files.


An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.


An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code.


The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1. A SwiftNIO application using TLS may be able to execute arbitrary code.


FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.


FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.


IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files which could allow the attacker to execute arbitrary code on the vulnerable server.


IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files which could allow the attacker to execute arbitrary code on the vulnerable server.


The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields which allows attackers to execute arbitrary code in a privileged context via a crafted app.


The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata which allows attackers to execute arbitrary code in a privileged context via a crafted application.


The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement.


The kernel in Apple iOS before 5.1 does not properly handle debug system calls which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.


Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.


TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthenticated attackers to execute arbitrary code.


A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges.


A logic issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina macOS Big Sur 11.6.2. An application may be able to execute arbitrary code with kernel privileges.


A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5 Security Update 2021-004 Catalina Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.


A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.


Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.


The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.


Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.


IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106.


Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx as used in LDRA TBbrowse and possibly other products allows remote attackers to execute arbitrary code via unknown vectors.


In Moxa EDS-G516E Series firmware Version 5.2 or lower the attacker may execute arbitrary codes or target the device causing it to go out of service.


McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection.


Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors.


Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors.


Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.


Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.


Microsoft Office 2007 SP3 2010 SP2 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image aka \Microsoft Office Malformed EPS File Vulnerability.\


NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local attackers to execute arbitrary code.


NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account which allows remote attackers to execute arbitrary code via unspecified vectors.


In OpenEXR 2.2.0 an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.


In OpenEXR 2.2.0 an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.


In OpenEXR 2.2.0 an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.


Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.


Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.


Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) logs.php and (2) users.php a different set of vectors than CVE-2006-3116.


Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php.


Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.


Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.


A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop ThinkStation and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.


A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop ThinkStation and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.


A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.


A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.


A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.


A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.


A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.


Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors a different vulnerability than CVE-2011-4458 and CVE-2011-5093.


Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in. NOTE: this issue might be subsumed by CVE-2008-0655.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code via unspecified vectors related to a \prefix protocol handler vulnerability.\


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X access uninitialized memory which allows attackers to execute arbitrary code via unspecified vectors.


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X dereference a heap object after this object's deletion which allows attackers to execute arbitrary code via unspecified vectors.


Adobe Reader and Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and Mac OS X allow attackers to execute arbitrary code via unspecified vectors related to a \prefix protocol handler vulnerability.\


Adobe Reader and Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and Mac OS X do not properly handle fonts which allows attackers to execute arbitrary code via unspecified vectors.


Adobe Reader and Acrobat 7.x before 7.1.4 8.x before 8.1.7 and 9.x before 9.2 do not properly validate input which might allow attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2009-3458.


Adobe Reader and Acrobat 7.x before 7.1.4 8.x before 8.1.7 and 9.x before 9.2 do not properly validate input which might allow attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2009-2998.


Adobe Reader and Acrobat 7.x before 7.1.4 8.x before 8.1.7 and 9.x before 9.2 on Unix when Debug mode is enabled allow attackers to execute arbitrary code via unspecified vectors related to a \format bug.\


Adobe Reader and Acrobat 8.x before 8.3.1 9.x before 9.4.6 and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors related to a \memory leakage condition vulnerability.\


Adobe Reader and Acrobat 8.x before 8.3.1 9.x before 9.4.6 and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors related to a \security bypass vulnerability.\


Adobe Reader and Acrobat 8.x before 8.3.1 9.x before 9.4.6 and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors related to a \logic error vulnerability.\


Adobe Reader and Acrobat 10.x before 10.0.1 9.x before 9.4.2 and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data which allows attackers to execute arbitrary code via unknown vectors.


Adobe Reader and Acrobat 10.x before 10.0.1 9.x before 9.4.2 and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a font.


RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file.


RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.


RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request.


RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file.


RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.


RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream.


IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system caused by formula injection due to improper input validation.


The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header.


On Samsung mobile devices with L(5.x) M(6.x) and N(7.x) software and Exynos chipsets attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598.


On Samsung mobile devices with L(5.x) M(6.0) and N(7.x) software Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution aka SVE-2017-11105.


Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission.


Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code.


Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.


Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.


Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory.


Untrusted search path vulnerability in Macroplant iExplorer 3.6.3.0 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse itunesmobiledevice.dll.


Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll file that is located in the same folder as the file being processed.


Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is located in the same folder as the file being processed.


Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory.


Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed.


Untrusted search path vulnerability in fwsnort before 1.6.4 when not running as root allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.


Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory.


Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file related to the explorer.exe filename and use of Windows Explorer.


Untrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.


Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.


Untrusted search path vulnerability in dash 0.5.4 when used as a login shell allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.


Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified \relative search path.\


Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory which is referenced in the LD_PRELOAD path.


Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).


Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).


Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.


Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.


Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.


Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.


Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.


Untrusted search path vulnerability in \i-filter 6.0 installer\ timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.


Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer.


Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe.


Untrusted search path vulnerability in the libtool-ltdl library (libltdl.so) 1.5.22-2.3 in Fedora Core 5 might allow local users to execute arbitrary code via a malicious library in the (1) hwcap (2) 0 and (3) nosegneg subdirectories.


Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.


Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory.


Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.


Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory.


Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory.


Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory related to an erroneous setting of sys.path by the PySys_SetArgv function.


Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31 and (2) reportbug-ng before 0.2008.06.04 allows local users to execute arbitrary code via a malicious module file in the current working directory.


Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory.


Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.


Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program which is invoked during the Restart As Root action.


Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory.


Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions.


Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.


Untrusted search path vulnerability in Truecrypt 4.1 when running suid root on Linux allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command.


Untrusted search path vulnerability in update_flash for IBM AIX 5.1 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.


Untrusted search path vulnerability in snappd in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via a Trojan horse program involving the \system subroutine\.


Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program.


Untrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain privileges via a Trojan horse executable file aka \Microsoft (MAU) Office Elevation of Privilege Vulnerability.\


IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to execute arbitrary code with administrator privileges via unspecified vectors. IBM X-Force ID: 111640.


IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates which allows remote authenticated users to execute arbitrary code via unspecified vectors.


Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.


Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data which allows attackers to execute arbitrary code via unknown vectors.


Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors related to a \design flaw.\


IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. IBM X-Force ID: 181725.


A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.


Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code as demonstrated by the PROTOS LDAPv3 test suite.


Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.


Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command.


Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.


Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a chat message related to a call to the BroadcastPrintf function.


Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.


Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname.


Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.


Format string vulnerability in the Cl_GetPackets function in cl_main.c in the client in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSV_CONSOLE_TEXT message.


Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler.


Format string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle (who).


Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name.


Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter.


Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4 and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0 allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.


Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors.


Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI which is not properly handled by certain dialogs.


Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings.


Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors.


Format string vulnerability in Ekiga 2.0.3 and probably other versions allows remote attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2007-1006.


Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.


Format string vulnerability in Apple iPhoto 6.0.5 (316) and other versions before 6.0.6 allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed.


Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a (1) PKG (2) DISTZ or (3) MPKG package filename.


Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.


Format string vulnerability in RealNetworks Helix Server 12.x 13.x and 14.x before 14.2 and Helix Mobile Server 12.x 13.x and 14.x before 14.2 allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.


Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname.


Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.


Format string vulnerability in Fortinet FortiClient 3.0.614 and possibly earlier allows local users to execute arbitrary code via format string specifiers in the VPN connection name.


Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22 and other versions before 7.39 allows remote attackers to execute arbitrary code via unspecified vectors.


Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.


Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier when running setuid allows local users to execute arbitrary code via format string specifiers in a command line argument.


Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.


Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication which is not properly handled when recording a log message.


Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the \sessions\ command.


Format string vulnerability in tcpflow when used in a setuid context allows local users to execute arbitrary code via the device name argument as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.


Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.


Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog (2) errorlog and (3) infolog.


Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.


Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high \trace level.\


Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.


Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename.


Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.


Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id which are injected into a syslog message.


Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument.


Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.


Format string vulnerability in prelink.c in kextload in Apple OS X as used by TDIXSupport in Roxio Toast Titanium and possibly other products allows local users to execute arbitrary code via format string specifiers in the extension argument.


Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.


Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.


Format string vulnerability in the log function in SUS 2.0.2 and other versions before 2.0.6 allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.


Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages a different vulnerability than CVE-2002-0702.


Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable.


Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.


Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.


Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.


Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved which is provided to the syslog function.


Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.


Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run (2) pppoa2 or (3) pppoa3.


Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3 when login debugging (DEBUG_LOGIN) is enabled allows remote attackers to execute arbitrary code.


Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.


Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code.


Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.


Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8 when running in daemon mode with certain service types in use allows remote servers to execute arbitrary code.


Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.


Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username which is processed by the wscanf function.


Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.


Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.


Format string vulnerability in Movable Type Pro Open Source and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.


Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format string specifiers in the \\keywords command in a crafted TeX file.


Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.


Format string vulnerability in the WriteText function in agl_text.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a player nickname.


Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call.


Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the WHATIDO variable.


Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162.


Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.


Format string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier allows local users to execute arbitrary code via unspecified attack vectors.


Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name).


Format string vulnerability in ANSI C Sender Policy Framework library (libspf) before 1.0.0-p5 when debugging is enabled allows remote attackers to execute arbitrary code via format string specifiers possibly in an e-mail address.


Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename.


Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.


Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.


Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string specifiers in a hostname which are used in an error dialog.


Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.


Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file.


Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.


Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.


Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.


Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string.


Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command.


Format string vulnerability in exim (3.22-10 in Red Hat 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.


Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier when using syslog allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers.


Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.


Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.


Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.


Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.


Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.


Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1 and 8.0 before 8.0.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a message.


Format string vulnerability in VMware OVF Tool 2.1 on Windows as used in VMware Workstation 8.x before 8.0.5 VMware Player 4.x before 4.0.5 and other products allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.


Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.


Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34 5.6.x before 5.6.20 and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.


Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument which is not properly handled when printing an error message.


Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier when compiled with IDENT logging to SYSLOG and with DEBUG enabled allows remote attackers to execute arbitrary code.


Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message.


Format string vulnerability in auditselect on IBM AIX 5.1 5.2 and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument.


Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page.


Format string vulnerability in Carsten's 3D Engine (Ca3DE) March 2004 version and earlier allows remote attackers to execute arbitrary code via format string specifiers in a command.


Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3 when the statistics option is enabled allows remote attackers to execute arbitrary code via the CWD command.


Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files.


Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename.


Format string vulnerability in the movemail utility in (1) Emacs 20.x 21.3 and possibly other versions and (2) XEmacs 21.4 and earlier allows remote malicious POP3 servers to execute arbitrary code via crafted packets.


Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.


Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header.


Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.


Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL.


Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6 and other versions before 0.6.90 allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.


Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a nickname.


Format string vulnerability in gxine 0.4.1 through 0.4.4 and other versions down to 0.3 allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers.


Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text.


Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.


Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.


Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier as called by the auth functions in the passwd_mysql and passwd_pgsql modules may allow attackers to execute arbitrary code via a URL.


Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.


Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command.


Format string vulnerability in friendsd2 in GpsDrive allows remote attackers to execute arbitrary code via the dir (direction) field.


Format string vulnerability in the Log_Flush function in Weex 2.6.1.5 2.6.1 and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.


Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option.


Format string vulnerability in the paginit command in IBM AIX 5.3 and possibly other versions might allow local users to execute arbitrary code via format strings in command line arguments.


Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.


Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.


Format string vulnerability in the swcons command in IBM AIX 5.3 and possibly other versions might allow local users to execute arbitrary code via long command line arguments.


Format string vulnerability in util.c in nbsmtp 0.99 and earlier while running in debug mode allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.


Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.


Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier which is not properly handled in a syslog call.


Format string vulnerability in the server for Dopewars before 1.5.12 when running as an NT service allows remote attackers to execute arbitrary code via unspecified attack vectors.


Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attackers to execute arbitrary code via unknown vectors.


Format string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier with compiled with the debug option allows remote attackers to execute arbitrary code via a crafted e-mail or POP server response.


Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.


Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code when a java.lang.NoClassDefFoundError is thrown via format specifiers in the forName attribute.


Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.0.8 2 allows remote attackers to execute arbitrary code.


Format string vulnerability in Deception Finger Daemon decfingerd 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request.


Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.


Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and possibly remote attackers to execute arbitrary code via format strings that are inserted into logging messages.


Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.


Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp (2) pop or (3) nntp allows remote malicious servers to execute arbitrary code.


Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.


Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.


Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.


Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.


Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.


Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.


Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.


Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.


Format string vulnerability in daemon.c for Exim 4.x through 4.10 and 3.x through 3.36 allows exim administrative users to execute arbitrary code by modifying the pid_file_path value.


Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181 which are not properly handled when writing a log message.


Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.


Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message as demonstrated using the Version field.


Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions.


Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface.


Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.


Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.


Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.


Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname.


Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name which is triggered when the game character is killed.


Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI which is recorded in a log file.


Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name (2) peer name and possibly unspecified other fields.


Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name.


IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to upload arbitrary files caused by the improper validation of file extensions which could allow the attacker to execute arbitrary code on the vulnerable system.


IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2 3.3.1 before 3.3.1.3 3.3.2 before 3.3.2.2 and 3.4 before 3.4.0.1 allows remote attackers to execute arbitrary code via a crafted URL.


Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app.


Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.


Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.


Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute arbitrary code via a crafted ASF packet.


An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document.


An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0 FrontVue and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.


Multiple unspecified vulnerabilities in the MW6 Aztec DataMatrix and MaxiCode ActiveX controls allow remote attackers to execute arbitrary code via a crafted HTML document.


Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21 when SOAP is used allow remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1678.


Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2) SOAP-RFC request.


Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie.


Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.


Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files gain access to private files and execute arbitrary code via \certain characters.\


Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app.


Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80.


Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file.


Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls as distributed on the CA Global Advisor web site until May 2009 allow remote attackers to execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 might allow attackers to execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in an ActiveX control in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Windows allow attackers to execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file.


Multiple unspecified vulnerabilities in HP Virtual Machine Manager (VMM) before 6.0 allow remote authenticated users to execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary code via unknown attack vectors.


Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.


Multiple unspecified vulnerabilities in OpenPBS as used in SUSE Linux 9.2 through 10.1 allow attackers to execute arbitrary code via unspecified vectors.


Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files.


Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.


Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to \input validation errors.\


Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file.


Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images.


Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional Flash Professional 8 and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file.


Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20 2.20.001 2.20.002 and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors.


Unrestricted

Upload

of

File

with

Dangerous

Type

in

DotCMS

and

earlier

allow

remote

attackers

to

execute

arbitrary

code

via

the

component

\/src/main/java/com/dotmarketing/filters/CMSFilter.java\.


Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'.


MCMS v5.2.4 was discovered to have a hardcoded shiro-key allowing attackers to exploit the key and execute arbitrary code.


MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module which allows attackers to execute arbitrary code via a crafted ZIP file.


Google V8 as used in Google Chrome before 2.0.172.43 allows remote attackers to bypass intended restrictions on reading memory and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox via crafted JavaScript.


A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.1 Security Update 2020-001 Catalina Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges.


GateManager versions prior to 9.2c The affected product is vulnerable to an off-by-one error which may allow an attacker to remotely execute arbitrary code or cause a denial-of-service condition.


A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php which could let a remote malicious user execute arbitrary code.


A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling which could let a malicious user execute arbitrary code


A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded which an attacker could utilize to execute arbitrary code.


Unspecified vulnerability in a Verity third party library as used on Adobe ColdFusion MX 7 through MX 7.0.2 and possibly other products allows local users to execute arbitrary code via unknown attack vectors.


Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1463.


Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1472.


Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1462.


Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1461.


Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1464.


Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1465.


Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier and before 7.1.1 allows remote attackers to execute arbitrary code via unknown vectors related to an \input validation issue.\


Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 11 9.0.1 before Update 10 9.0.2 before Update 5 and 10 before Update 10 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a \break into the sandbox \ as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.


Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors related to \input validation errors.\


Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allows attackers to execute arbitrary code via a crafted font a different vulnerability than CVE-2010-2889.


Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allows attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allows attackers to execute arbitrary code via a crafted image a different vulnerability than CVE-2010-3620.


Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via a crafted image.


Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allows attackers to execute arbitrary code via a crafted image a different vulnerability than CVE-2010-3629.


Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allows attackers to execute arbitrary code via a crafted font a different vulnerability than CVE-2010-3626.


Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content.


Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors as exploited in the wild in June 2016.


Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36 and 9.0.151.0 and earlier allows remote attackers to execute arbitrary code via a crafted SWF file.


Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font.


Unspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute arbitrary code with root privileges via unknown vectors as demonstrated by Google during a Pwn4Fun competition at CanSecWest 2014.


Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.


Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009.


Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to \improper bounds checking when processing certain user input.\


Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet aka CSCsi80749.


Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0 5.1 and 6.0 and IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet aka CSCsi80102.


Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors and consequently execute arbitrary code via a crafted web application aka Bug ID CSCtc46008.


Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors.


Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors related to the implementation of ICA connectivity through proxy servers.


Unspecified vulnerability in HP Unified Functional Testing before 12.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1932.


Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x 9.1x and 9.2x allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Security Management System 3.3.0 3.5.0 before patch 1 and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1736.


Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1735.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1690.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1734.


Unspecified vulnerability in HP Service Manager 7.11 9.21 9.30 9.31 and 9.32 and ServiceCenter 6.2.8 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1606.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1705.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1635.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1671.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1680.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1654.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1634.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1670.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1681.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1638.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1636.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1629.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1633.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1733.


Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors aka ZDI-CAN-1802.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1652.


Unspecified vulnerability in HP Storage Data Protector 6.20 6.21 7.00 and 7.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1637.


Unspecified vulnerability in HP OpenView Storage Data Protector on HP-UX B.11.00 B.11.11 or B.11.23 allows local users to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2343.


Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2344.


Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors aka ZDI-CAN-2083.


Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x 9.1x and 9.2x allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2264.


Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role.


Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2336.


Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors aka ZDI-CAN-2104.


Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors aka ZDI-CAN-2091.


Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2342.


Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x 7.5x and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1 when running on Windows allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2876.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2883.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2875.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2884.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2881.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2877.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2879.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2885.


Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-2880.


Unspecified vulnerability in HP Intelligent Provisioning 1.00 through 1.62(a) 2.00 and 2.10 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Operations Manager i (OMi) 9.22 9.23 9.24 9.25 10.00 and 10.01 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP OpenView Storage Data Protector 5.1 and 5.5 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1325.


Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1326.


Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1659.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1611.


Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Business Service Automation (BSA) Essentials 2.01 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1296.


Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1209.


Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1225.


Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1210.


Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1222.


Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1226.


Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1229.


Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1208.


Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1228.


Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1227.


Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions and consequently execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP OpenView Storage Data Protector 6.0 6.10 and 6.11 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 5002 related to the HttpTunnel feature.


Unspecified vulnerability in HP Client Automation Enterprise (aka HPCA or Radia Notify) 5.11 7.2 7.5 7.8 and 7.9 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1213.


Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1263.


Unspecified vulnerability in HP Network Automation 7.5x 7.6x 9.0 and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors aka ZDI-CAN-1214.


Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors a different vulnerability than CVE-2013-5370.


Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors a different vulnerability than CVE-2013-4042.


Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 6.0.1 before SR7 and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.


Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.


Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors.


Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.


Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file aka \Excel Record Stack Corruption Vulnerability.\


Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file aka \Excel String Variable Vulnerability.\


Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.


Unknown vulnerability in Microsoft Excel 2000 2002 2001 for Mac and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.


Unspecified vulnerability in Microsoft Word 2000 2002 and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file a different vulnerability than CVE-2006-3647 and CVE-2006-4693.


Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.


Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag.


Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB) file.


Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.


Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.


Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file a different issue than CVE-2006-3647 and CVE-2006-3651.


Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0 related to insufficient data validation allows remote attackers to execute arbitrary code via a crafted mdb file.


Unspecified vulnerability in Microsoft Office Publisher 2000 2002 and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file related to invalid \memory values \ aka \Publisher Invalid Memory Reference Vulnerability.\


Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007 Viewer 2003 Compatibility Pack and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas aka \Excel Formula Parsing Vulnerability.\


Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.


Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3 XP SP3 2003 SP2 and Sp3 and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.


Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file possibly related to Jet Engine (msjet40.dll). NOTE: this is probably a different issue than CVE-2007-6026.


Unspecified vulnerability in Microsoft Visio 2002 SP2 2003 SP2 and SP3 and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data aka \Visio Object Header Vulnerability.\


Unspecified vulnerability in Microsoft Visio 2002 SP2 2003 SP2 and SP3 and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file aka \Visio Memory Validation Vulnerability.\


Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors. NOTE: this might be the same issue as CVE-2007-2175.