Latest CVE Feed
-
9.3
HIGHCVE-2019-6834
A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successf... Read more
Affected Products : software_update- Published: Apr. 13, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-22797
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when ... Read more
- Published: Apr. 13, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-2286
Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for ... Read more
Affected Products : nfc_port_firmware pc\/sc_activator_for_type_b sfcard_viewer_2 nfc_net_installer rc-s310 rc-s320 rc-s330 rc-s370 rc-s380 rc-s380\/s +2 more products- Published: Aug. 02, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2221
Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.... Read more
Affected Products : baidu_ime- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0716
A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37203196.... Read more
Affected Products : android- Published: Aug. 09, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0720
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213.... Read more
Affected Products : android- Published: Aug. 09, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0722
A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827.... Read more
Affected Products : android- Published: Aug. 09, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2016-5864
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another f... Read more
Affected Products : android- Published: Aug. 16, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2022-28108
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.... Read more
Affected Products : selenium_grid- Published: Apr. 19, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-2228
Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.... Read more
Affected Products : teikihoukokusho_sakuseishien_tool- Published: Aug. 18, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2021-42969
Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed.... Read more
Affected Products : anaconda3- Published: May. 13, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2016-10383
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.... Read more
Affected Products : android- Published: Aug. 18, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-8255
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.... Read more
Affected Products : android- Published: Aug. 18, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-10812
Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.... Read more
Affected Products : photo_collection_pc_software- Published: Aug. 29, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-10827
Untrusted search path vulnerability in Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.... Read more
Affected Products : flets_azukuu_pc_automatic_backup_tool- Published: Aug. 29, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0758
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741.... Read more
Affected Products : android- Published: Sep. 08, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0762
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264.... Read more
Affected Products : android- Published: Sep. 08, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0766
A remote code execution vulnerability in the Android media framework (libjhead). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688.... Read more
Affected Products : android- Published: Sep. 08, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0768
A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62019992.... Read more
Affected Products : android- Published: Sep. 08, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2015-7908
Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network.... Read more
- Published: Dec. 21, 2015
- Modified: Apr. 12, 2025