Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 9.3

    HIGH
    CVE-2017-8278

    In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur.... Read more

    Affected Products : android
    • EPSS Score: %0.04
    • Published: Sep. 21, 2017
    • Modified: Apr. 20, 2025
  • 9.3

    HIGH
    CVE-2013-0686

    Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document co... Read more

    Affected Products : wonderware_information_server
    • EPSS Score: %0.46
    • Published: May. 09, 2013
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2013-0707

    Unspecified vulnerability in JustSystems Ichitaro 2006 and 2007, Ichitaro Government 2006 and 2007, Ichitaro Portable with oreplug, Hanako 2006 through 2013, Hanako Police, Hanako Police 3, and Hanako Police 2010 allows remote attackers to execute arbitra... Read more

    • EPSS Score: %3.50
    • Published: Mar. 01, 2013
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2013-0726

    Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.... Read more

    Affected Products : erdas_er_viewer
    • EPSS Score: %65.42
    • Published: May. 05, 2013
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2013-0723

    Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a crafted spreadsheet file.... Read more

    Affected Products : spreadsheets_2012
    • EPSS Score: %7.61
    • Published: Jul. 29, 2013
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2010-1686

    Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP archive.... Read more

    Affected Products : abc_backup urgent_backup
    • EPSS Score: %5.20
    • Published: May. 05, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2009-1324

    Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.... Read more

    Affected Products : asx_to_mp3_converter
    • EPSS Score: %8.96
    • Published: Apr. 17, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1598

    Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on acc... Read more

    Affected Products : chrome
    • EPSS Score: %0.31
    • Published: May. 11, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1639

    Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file.... Read more

    Affected Products : kernel_recovery
    • EPSS Score: %1.32
    • Published: May. 15, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1641

    Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.... Read more

    Affected Products : ripper
    • EPSS Score: %65.93
    • Published: May. 15, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1644

    Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file.... Read more

    Affected Products : streaming_audio_player
    • EPSS Score: %8.65
    • Published: May. 15, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1666

    Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, and (3) CM_RecordingLocationDBC.dll, relate... Read more

    Affected Products : cycloscopelite
    • EPSS Score: %1.85
    • Published: May. 18, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2018-14923

    A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback.... Read more

    Affected Products : ezplayer
    • EPSS Score: %0.23
    • Published: Aug. 03, 2018
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2009-1815

    Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via a long string in a playlist file, as demonstrated by a long .mp3 URL in a .m3u file.... Read more

    Affected Products : audioactive_player
    • EPSS Score: %9.71
    • Published: May. 29, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2016-2437

    The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27436822.... Read more

    Affected Products : android nexus_9
    • EPSS Score: %0.04
    • Published: May. 09, 2016
    • Modified: Apr. 12, 2025
  • 9.3

    HIGH
    CVE-2016-2470

    The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27662174.... Read more

    Affected Products : android
    • EPSS Score: %0.04
    • Published: Jun. 13, 2016
    • Modified: Apr. 12, 2025
  • 9.3

    HIGH
    CVE-2016-2479

    The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated ... Read more

    Affected Products : android
    • EPSS Score: %0.04
    • Published: Jun. 13, 2016
    • Modified: Apr. 12, 2025
  • 9.3

    HIGH
    CVE-2016-2505

    mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted medi... Read more

    Affected Products : android
    • EPSS Score: %0.17
    • Published: Jul. 11, 2016
    • Modified: Apr. 12, 2025
  • 9.3

    HIGH
    CVE-2008-4652

    Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property.... Read more

    Affected Products : powertcp_ftp_for_activex
    • EPSS Score: %11.43
    • Published: Oct. 22, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2010-3041

    Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitra... Read more

    • EPSS Score: %10.94
    • Published: Feb. 02, 2011
    • Modified: Apr. 11, 2025
Showing 20 of 291806 Results