https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 02:41:33 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-112 certa-2008-avi-112 https://cve.radiocsirt.org/vuln/certa-2008-avi-112 https://cve.radiocsirt.org/vuln/euvd-2026-137747 EUVD-2026-137747 https://cve.radiocsirt.org/vuln/euvd-2026-137747 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6016 <p>Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states &#34;Authenticated user involvement required,&#34; but authentication is not needed to attack a client machine that loads this control.</p> <p>Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states &#34;Authenticated user involvement required,&#34; but authentication is not needed to attack a client machine that loads this control.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-6016 https://cve.radiocsirt.org/vuln/ghsa-q964-x2rc-v787 <p>Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states &#34;Authenticated user involvement required,&#34; but authentication is not needed to attack a client machine that loads this control.</p> <p>Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states &#34;Authenticated user involvement required,&#34; but authentication is not needed to attack a client machine that loads this control.</p> https://cve.radiocsirt.org/vuln/ghsa-q964-x2rc-v787 https://cve.radiocsirt.org/vuln/gsd-2007-6016 gsd-2007-6016 https://cve.radiocsirt.org/vuln/gsd-2007-6016 https://cve.radiocsirt.org/vuln/jvndb-2008-001311 <p>The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11</p> <p>The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11</p> https://cve.radiocsirt.org/vuln/jvndb-2008-001311