Latest CVE Feed
-
5.5
MEDIUMCVE-2006-5649
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (kernel panic) via unspecified vectors.... Read more
- EPSS Score: %0.05
- Published: Dec. 14, 2006
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2023-44214
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.... Read more
- EPSS Score: %0.05
- Published: Oct. 05, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-44126
The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such a... Read more
- EPSS Score: %0.05
- Published: Sep. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-9929
In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file.... Read more
- EPSS Score: %0.44
- Published: Jun. 26, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-8688
Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it disclose... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016- EPSS Score: %6.19
- Published: Sep. 13, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-8515
Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an unauthenticated attacker to send a specially crafted kernel mode request to cause a denial of service on the target system, aka "Windows VAD Cloning Denial of Service Vulnerabilit... Read more
- EPSS Score: %0.39
- Published: Jun. 15, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-8508
A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Microsoft Office Security Feature Bypass Vulnerability".... Read more
- EPSS Score: %15.48
- Published: Jun. 15, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2023-43782
Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence.... Read more
Affected Products : cadence- EPSS Score: %0.02
- Published: Sep. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52972
Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitation this vulnerability could lead to termination of some system processes.... Read more
Affected Products :- Published: Mar. 26, 2025
- Modified: Mar. 27, 2025
- Vuln Type: Authorization
-
5.5
MEDIUMCVE-2017-6847
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.... Read more
Affected Products : podofo- EPSS Score: %0.40
- Published: Mar. 15, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-6841
The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.... Read more
Affected Products : podofo- EPSS Score: %0.10
- Published: Mar. 15, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-6840
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.... Read more
Affected Products : podofo- EPSS Score: %0.11
- Published: Mar. 15, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2023-52913
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So ... Read more
Affected Products : linux_kernel- Published: Aug. 21, 2024
- Modified: Nov. 08, 2024
-
5.5
MEDIUMCVE-2017-6355
Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access... Read more
Affected Products : virglrenderer- EPSS Score: %0.14
- Published: Mar. 10, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-5950
The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.... Read more
Affected Products : yaml-cpp- EPSS Score: %0.29
- Published: Apr. 03, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-5414
The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firef... Read more
- EPSS Score: %0.13
- Published: Jun. 11, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-43616
An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.... Read more
Affected Products : croc- EPSS Score: %0.08
- Published: Sep. 20, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-4925
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. Thi... Read more
- EPSS Score: %0.06
- Published: Sep. 15, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2023-43485
When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.... Read more
Affected Products : big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system big-ip_fraud_protection_service big-ip_global_traffic_manager big-ip_link_controller big-ip_local_traffic_manager +9 more products- EPSS Score: %0.23
- Published: Oct. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-43090
A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.... Read more
- EPSS Score: %0.07
- Published: Sep. 22, 2023
- Modified: Nov. 21, 2024