Latest CVE Feed
-
9.3
HIGHCVE-2011-4216
Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.... Read more
Affected Products : slimpdf_reader- EPSS Score: %2.79
- Published: Nov. 01, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2012-4924
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.... Read more
- EPSS Score: %79.90
- Published: Sep. 15, 2012
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2014-5406
The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via pac... Read more
- EPSS Score: %0.61
- Published: Jul. 06, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-8385
An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a leng... Read more
Affected Products : argus- EPSS Score: %0.95
- Published: Feb. 27, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2006-5820
The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.... Read more
Affected Products : aol- EPSS Score: %40.74
- Published: Apr. 02, 2007
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2018-10731
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).... Read more
Affected Products : fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firmware fl_switch_3006t-2fx_st_firmware fl_switch_3012e-2sfx_firmware fl_switch_3016e_firmware +48 more products- EPSS Score: %1.47
- Published: May. 17, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2007-2244
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.... Read more
- EPSS Score: %29.73
- Published: Apr. 25, 2007
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2009-2934
Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a (1) .pls or (2) .pl playlist file.... Read more
Affected Products : pipl- EPSS Score: %10.27
- Published: Aug. 21, 2009
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2016-8432
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device comp... Read more
- EPSS Score: %0.24
- Published: Jan. 12, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2008-2821
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-200... Read more
- EPSS Score: %2.34
- Published: Jun. 23, 2008
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2010-2702
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, all... Read more
Affected Products : unreal_engine postal_2 raven_shield swat_4 unreal_tournament_2003 unreal_tournament_2004- EPSS Score: %5.50
- Published: Jul. 12, 2010
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2008-2503
Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors.... Read more
Affected Products : emule_x-ray- EPSS Score: %0.41
- Published: May. 29, 2008
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2019-2003
In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirection of clicks with no additional execution privileges needed. User interaction is needed for exploitation.P... Read more
Affected Products : android- EPSS Score: %1.67
- Published: Jun. 19, 2019
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2015-6639
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875.... Read more
Affected Products : android- EPSS Score: %7.80
- Published: Jan. 06, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2018-15414
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected softwa... Read more
Affected Products : webex_meetings_server webex_meetings_online webex_business_suite_32 webex_business_suite_33- EPSS Score: %0.23
- Published: Oct. 05, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2018-15416
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected softwa... Read more
Affected Products : webex_meetings_server webex_meetings_online webex_business_suite_32 webex_business_suite_33- EPSS Score: %0.23
- Published: Oct. 05, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2018-9569
In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for ex... Read more
Affected Products : android- EPSS Score: %0.37
- Published: Dec. 07, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2018-1552
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file ... Read more
Affected Products : robotic_process_automation_with_automation_anywhere- EPSS Score: %1.87
- Published: Nov. 02, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-34078
lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.... Read more
Affected Products : lifion-verifiy-dependencies- EPSS Score: %1.54
- Published: Jun. 02, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2018-15412
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected softwa... Read more
Affected Products : webex_meetings_server webex_meetings_online webex_business_suite_32 webex_business_suite_33- EPSS Score: %0.23
- Published: Oct. 05, 2018
- Modified: Nov. 21, 2024