Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 9.3

    HIGH
    CVE-2010-3326

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitiali... Read more

    • Published: Oct. 13, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2009-4758

    Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .YUV file.... Read more

    Affected Products : mpegable_player
    • Published: Mar. 29, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2010-2563

    The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents, which allows remote attackers to execute arbitrary code via a crafted docu... Read more

    Affected Products : windows_server_2003 windows_xp
    • Published: Sep. 15, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2009-4737

    Stack-based buffer overflow in JustSystems Corporation Ichitaro 13, 2004 through 2009, Viewer 2009 19.0.1.0 and earlier, and other versions allows context-dependent attackers to execute arbitrary code via a crafted Rich Text File (RTF), related to "pvpara... Read more

    Affected Products : ichitaro ichitaro_viewer
    • Published: Apr. 06, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2009-4759

    Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .BMX file.... Read more

    Affected Products : bmxplay
    • Published: Mar. 29, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2015-2404

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE... Read more

    Affected Products : internet_explorer
    • Published: Jul. 14, 2015
    • Modified: Apr. 12, 2025
  • 9.3

    HIGH
    CVE-2009-3389

    Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video wi... Read more

    Affected Products : firefox seamonkey
    • Published: Dec. 17, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2007-0777

    The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors t... Read more

    • Published: Feb. 26, 2007
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2020-13958

    A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered unconditionally. In fixed versions no intern... Read more

    Affected Products : openoffice
    • Published: Nov. 17, 2020
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2009-4756

    Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.... Read more

    Affected Products : beatport_player
    • Published: Mar. 29, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2009-4676

    Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long title in a FLAC file. NOTE: the provenance of this information is unknown; the details are obtained solely f... Read more

    Affected Products : jetaudio jetaudio
    • Published: Mar. 05, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2009-4631

    Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that triggers an out-of-bounds read and possibly memory corruption.... Read more

    Affected Products : ffmpeg
    • Published: Feb. 10, 2010
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2017-16372

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to untrusted pointer dereference in the... Read more

    • Published: Dec. 09, 2017
    • Modified: Apr. 20, 2025
  • 9.3

    HIGH
    CVE-2009-4502

    The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.li... Read more

    Affected Products : solaris freebsd zabbix
    • Published: Dec. 31, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-4480

    Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.16 through 8.11. NOTE: as of 20091229, thi... Read more

    Affected Products : daqfactory
    • Published: Dec. 30, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2010-4253

    Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document,... Read more

    Affected Products : ubuntu_linux debian_linux openoffice
    • Published: Jan. 28, 2011
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2007-5209

    Stack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers to execute arbitrary code via a long HTTP request to TCP port 6061. NOTE: the provenance of this information is unknown; the details are obtained solely fro... Read more

    Affected Products : drivelock
    • Published: Oct. 04, 2007
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-4376

    Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.... Read more

    Affected Products : wireshark
    • Published: Dec. 21, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2011-4374

    Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.... Read more

    Affected Products : macos acrobat windows reader unix
    • Published: Jan. 19, 2012
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2014-0283

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."... Read more

    Affected Products : internet_explorer
    • Published: Feb. 12, 2014
    • Modified: Apr. 11, 2025
Showing 20 of 294423 Results