Latest CVE Feed
-
9.3
HIGHCVE-2017-6549
Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, ... Read more
- Published: Mar. 09, 2017
- Modified: Apr. 20, 2025
-
9.3
CRITICALCVE-2024-48973
The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have u... Read more
Affected Products :- Published: Nov. 14, 2024
- Modified: Nov. 15, 2024
-
9.3
HIGHCVE-2021-43026
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is r... Read more
- Published: Dec. 20, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-43024
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is r... Read more
- Published: Dec. 20, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-43013
Adobe Media Encoder version 15.4.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this ... Read more
- Published: Nov. 16, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-6035
A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in denial of service when a malicious project file is run on the system.... Read more
Affected Products : levi_studio_hmi_editor- Published: Apr. 27, 2017
- Modified: Apr. 20, 2025
-
9.3
CRITICALCVE-2021-40400
An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit d7f42a9a). A specially-crafted Gerber file can lead to information di... Read more
Affected Products : gerbv- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-35994
Adobe After Effects version 18.2.1 (and earlier) is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of... Read more
- Published: Sep. 02, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-31956
Windows NTFS Elevation of Privilege Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products- Actively Exploited
- Published: Jun. 08, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-30886
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. An application may be able to execute arbitrary code with kernel privileges.... Read more
- Published: Aug. 24, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-21048
Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
9.3
CRITICALCVE-2021-0268
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the de... Read more
Affected Products : junos- Published: Apr. 22, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2020-9821
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileg... Read more
- Published: Jun. 09, 2020
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2020-9813
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute ar... Read more
- Published: Jun. 09, 2020
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2020-9793
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A remote attacker may be able to cause arbitrary code execution.... Read more
- Published: Jun. 09, 2020
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2020-9657
Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .... Read more
- Published: Jun. 25, 2020
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2020-9564
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .... Read more
- Published: Jun. 26, 2020
- Modified: May. 05, 2025
-
9.3
HIGHCVE-2020-9559
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .... Read more
- Published: Jun. 26, 2020
- Modified: May. 05, 2025
-
9.3
HIGHCVE-2017-5161
An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identifie... Read more
- Published: Feb. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
CRITICALCVE-2020-8907
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "docker" group, an attacker w... Read more
- Published: Jun. 22, 2020
- Modified: Nov. 21, 2024