Latest CVE Feed
-
9.3
HIGHCVE-2015-6596
mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717.... Read more
Affected Products : android- EPSS Score: %0.21
- Published: Oct. 06, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2010-2583
Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to ... Read more
Affected Products : ssl-vpn_end-point_interrogator\/installer_activex_control- EPSS Score: %7.76
- Published: Nov. 03, 2010
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2018-15573
An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as long as rlm.exe has access to it) via /goform/edit_lf_process with file content in the lfdata para... Read more
Affected Products : reprise_license_manager- EPSS Score: %0.26
- Published: Aug. 20, 2018
- Modified: Apr. 30, 2025
-
9.3
HIGHCVE-2019-15295
An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path.... Read more
Affected Products : antivirus_2020- EPSS Score: %0.16
- Published: Aug. 21, 2019
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2009-3574
Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a .pls playlist file, possibly a buffer overflow.... Read more
Affected Products : tuniac- EPSS Score: %2.32
- Published: Oct. 06, 2009
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2009-3693
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method... Read more
- EPSS Score: %71.51
- Published: Oct. 13, 2009
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2008-2693
Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method.... Read more
Affected Products : barcode_sdk- EPSS Score: %12.16
- Published: Jun. 13, 2008
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2008-2705
Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition (DSEE), allows remote attackers to bypass authentication via unspecified vectors.... Read more
Affected Products : java_system_access_manager- EPSS Score: %0.35
- Published: Jun. 16, 2008
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2009-4117
Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types ... Read more
Affected Products : sumatrapdf- EPSS Score: %24.33
- Published: Dec. 01, 2009
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2020-24707
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.... Read more
Affected Products : gophish- EPSS Score: %0.17
- Published: Oct. 28, 2020
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2016-3681
Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service (crash) or possibly gain priv... Read more
- EPSS Score: %0.06
- Published: May. 26, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2019-1637
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected softwa... Read more
- EPSS Score: %0.30
- Published: Jan. 23, 2019
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2016-3806
The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28402341 and MediaTek internal bug ALPS02715341.... Read more
Affected Products : android- EPSS Score: %0.04
- Published: Jul. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3811
The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28447556.... Read more
Affected Products : android- EPSS Score: %0.04
- Published: Jul. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3871
Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow attackers to gain privileges via a crafted ... Read more
Affected Products : android- EPSS Score: %0.20
- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3930
The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28760138.... Read more
Affected Products : android- EPSS Score: %0.07
- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2017-2212
Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.... Read more
Affected Products : tky2jgd- EPSS Score: %0.14
- Published: Jun. 09, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2019-19017
An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this to gain root privileges on the system.... Read more
Affected Products : webtitan- EPSS Score: %0.41
- Published: Dec. 02, 2019
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-2287
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.... Read more
Affected Products : nfc_port_software_remover- EPSS Score: %0.14
- Published: Aug. 02, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2016-3909
The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug ... Read more
Affected Products : android- EPSS Score: %0.14
- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025