Latest CVE Feed
-
9.3
HIGHCVE-2018-12865
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Oct. 12, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2011-0332
Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.... Read more
- Published: Feb. 25, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0331
Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document.... Read more
Affected Products : scanserver_activex_control- Published: Mar. 22, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0386
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739.... Read more
- Published: Feb. 25, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0319
Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0320, CVE-201... Read more
Affected Products : shockwave_player- Published: Jun. 16, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0324
Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long (1) KeyString property, (2) NewPath parameter to the SetLocalIniFi... Read more
Affected Products : sigplus_pro_activex_control- Published: Feb. 07, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0317
Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-201... Read more
Affected Products : shockwave_player- Published: Jun. 16, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0318
Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0319, CVE-2011-0320, CVE-201... Read more
Affected Products : shockwave_player- Published: Jun. 16, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2009-3855
Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is enabled, ... Read more
Affected Products : tivoli_storage_manager- Published: Nov. 04, 2009
- Modified: Apr. 09, 2025
-
9.3
HIGHCVE-2010-4381
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file... Read more
- Published: Dec. 14, 2010
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0346
Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the DOM implem... Read more
- Published: Jan. 07, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0258
Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file.... Read more
- Published: Sep. 06, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2012-0395
Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.... Read more
Affected Products : networker- Published: Jan. 27, 2012
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0347
Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via vectors related to the DOM implementation, as demonstrated by cross_fuzz.... Read more
- Published: Jan. 07, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0248
Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL fil... Read more
- Published: Aug. 04, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2011-0251
Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSZ atoms in a QuickTime movie file.... Read more
- Published: Aug. 04, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2015-1731
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-20... Read more
Affected Products : internet_explorer- Published: Jun. 10, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2011-0254
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE... Read more
- Published: Jul. 21, 2011
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2016-3365
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on ... Read more
Affected Products : excel_viewer excel office_online_server office_compatibility_pack sharepoint_designer- Published: Sep. 14, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2009-3981
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via... Read more
- Published: Dec. 17, 2009
- Modified: Apr. 09, 2025