Vulnerability Information Center

Research news

CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability

View all research news

Blog

Yet Another Exploited PDF in the Wild

View all blogs

Newly Discovered

Date Posted	Name	Condition

11 Nov 2008	Microsoft XML core services header request information disclosure vulnerability	Medium
11 Nov 2008	Microsoft Server Message Block (SMB) remote code execution vulnerability	Medium
11 Nov 2008	Microsoft MSXML DTD cross-domain scripting information disclosure vulnerability	Medium
04 Nov 2008	Adobe Reader download manager unspecified vulnerability	Medium
04 Nov 2008	Adobe Acrobat and Reader on Unix and Linux insecure RPATH privilege escalation vulnerability	Medium
04 Nov 2008	Adobe Reader download manager remote code execution vulnerability	Medium
04 Nov 2008	Adobe Acrobat and Reader java script method remote code execution vulnerability	Medium
31 Oct 2008	Net-snmp getbulk code denial of service vulnerability	Medium
27 Oct 2008	Lynx "lynxcgi:" URL handler remote code execution vulnerability	Medium
27 Oct 2008	Lynx ".mailcap" and ".mime.types" arbitrary code execution vulnerability	Medium
23 Oct 2008	Microsoft Windows Server service remote code execution vulnerability	Medium
19 Oct 2008	Clamav libclamav denial of service vulnerability	Medium
15 Oct 2008	Oracle Database Workspace Manager component unspecified information disclosure vulnerability	Medium
15 Oct 2008	Oracle Database Workspace Manager component unspecified information disclosure vulnerability	Medium
15 Oct 2008	Oracle spatial component unspecified information disclosure vulnerability	Medium
14 Oct 2008	Microsoft Office content disposition header cross-site scripting vulnerability	Medium
14 Oct 2008	Microsoft Excel calendar object validation remote code execution vulnerability	Medium
14 Oct 2008	Microsoft Windows Kernel privilege escalation vulnerability	Medium
14 Oct 2008	Microsoft Internet Explorer html objects memory corruption remote code execution vulnerability	Medium
14 Oct 2008	Oracle database server Change Data Capture component DBMS_CDC_PUBLISH security bypass vulnerability	Medium
14 Oct 2008	Microsoft Internet Explorer cross-domain information disclosure vulnerability	Medium
14 Oct 2008	Microsoft Excel formula parsing remote code execution vulnerability	Medium
14 Oct 2008	Microsoft Windows virtual address descriptor elevation of privilege vulnerability	Medium
14 Oct 2008	Microsoft Active Directory LDAP requests remote code execution vulnerability	Medium
14 Oct 2008	Oracle database server data mining componenet DMSYS.ODM_MODEL_UTIL() security bypass vulnerability	Medium
14 Oct 2008	Microsoft Internet Explorer HTML element cross-domain remote code execution vulnerability	Medium
14 Oct 2008	Microsoft Windows kernel memory corruption vulnerability	Medium
14 Oct 2008	Oracle database server OLAP component unspecified vulnerability	Medium
14 Oct 2008	Microsoft Internet Explorer window location property cross-domain vulnerability	Medium
14 Oct 2008	Microsoft Windows Message Queuing Service remote code execution vulnerability	Medium

Latest Advisories

Date Posted	Name	Condition

11 Nov 2008	Microsoft MSXML DTD cross-domain scripting information disclosure vulnerability	Medium
11 Nov 2008	Microsoft XML core services header request information disclosure vulnerability	Medium
11 Nov 2008	Microsoft Server Message Block (SMB) remote code execution vulnerability	Medium
04 Jan 2007	Microsoft MSXML3 remote code execution vulnerability	High

Top 5 Vulnerability Threats

Date Posted	Name	Condition

15 Jul 2003	Microsoft Windows RPC malformed message buffer overflow vulnerability	Critical
09 Aug 2005	Microsoft Windows Plug and Play service buffer overflow vulnerability	High
09 Aug 2005	Microsoft Windows Telephony Service data and permission validation vulnerability	High
09 Feb 2004	Microsoft Windows ASN.1 library buffer overflow vulnerability	High
09 Aug 2005	Microsoft Windows Print Spooler service buffer overflow vulnerability	High