Latest CVE Feed
-
10.0
HIGHCVE-2017-1000020
SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass. "eCos Embedded Web Servers used by Multiple Routers and Home devices, while sending SYN Flood or FIN Flood packets fails to validate and hand... Read more
- EPSS Score: %1.13
- Published: Jul. 17, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2017-1000060
EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root... Read more
Affected Products : eyesofnetwork- EPSS Score: %6.57
- Published: Jul. 17, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2017-0807
An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974.... Read more
Affected Products : android- EPSS Score: %2.48
- Published: Oct. 04, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2019-7082
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code executi... Read more
- EPSS Score: %17.20
- Published: May. 24, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2019-7060
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code ex... Read more
- EPSS Score: %2.74
- Published: May. 24, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2019-3689
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory conta... Read more
- EPSS Score: %0.15
- Published: Sep. 19, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2017-0561
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the conte... Read more
- EPSS Score: %44.37
- Published: Apr. 07, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2019-7105
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.... Read more
- EPSS Score: %27.65
- Published: May. 23, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2019-15292
An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c.... Read more
- EPSS Score: %0.95
- Published: Aug. 21, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2017-0359
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.... Read more
- EPSS Score: %0.54
- Published: Apr. 13, 2018
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2019-14901
A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. T... Read more
- EPSS Score: %10.36
- Published: Nov. 29, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2017-0028
A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An a... Read more
Affected Products : edge- EPSS Score: %19.63
- Published: Jul. 17, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2016-9967
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privi... Read more
Affected Products : samsung_mobile- EPSS Score: %0.49
- Published: Dec. 16, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2016-9961
game-music-emu before 0.6.1 mishandles unspecified integer values.... Read more
- EPSS Score: %2.85
- Published: Jun. 06, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2016-9966
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privi... Read more
Affected Products : samsung_mobile- EPSS Score: %0.49
- Published: Dec. 16, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2018-7445
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before... Read more
Affected Products : routeros- Actively Exploited
- EPSS Score: %87.80
- Published: Mar. 19, 2018
- Modified: Aug. 15, 2025
-
10.0
HIGHCVE-2018-5070
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the curren... Read more
- EPSS Score: %23.88
- Published: Jul. 20, 2018
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2018-4977
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user... Read more
- EPSS Score: %1.80
- Published: Jul. 09, 2018
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2016-9682
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI (/cgi-bin/diagnostics) component respons... Read more
Affected Products : sonicwall_secure_remote_access_server- EPSS Score: %21.42
- Published: Feb. 22, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2018-4169
In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was addressed with improved input validation.... Read more
- EPSS Score: %0.44
- Published: Jan. 11, 2019
- Modified: Nov. 21, 2024