Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 9.3

    HIGH
    CVE-2008-0311

    Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.... Read more

    Affected Products : caliberrm
    • Published: Apr. 06, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0320

    Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.... Read more

    Affected Products : openoffice.org
    • Published: Apr. 17, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2018-14722

    An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/... Read more

    Affected Products : btrfsmaintenance
    • Published: Aug. 15, 2018
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2016-3861

    LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to exec... Read more

    Affected Products : android
    • Published: Sep. 11, 2016
    • Modified: Apr. 12, 2025
  • 9.3

    HIGH
    CVE-2016-2464

    libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka ... Read more

    Affected Products : android
    • Published: Jun. 13, 2016
    • Modified: Apr. 12, 2025
  • 9.3

    HIGH
    CVE-2019-1250

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, ... Read more

    • Published: Sep. 11, 2019
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2019-1242

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1243, ... Read more

    • Published: Sep. 11, 2019
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2008-0312

    Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through... Read more

    • Published: Apr. 08, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0221

    Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument ... Read more

    Affected Products : weblaunch
    • Published: Jan. 10, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0250

    Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long Project line.... Read more

    Affected Products : visual_interdev
    • Published: Jan. 12, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0119

    Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, ... Read more

    Affected Products : office publisher
    • Published: May. 13, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0113

    Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Mi... Read more

    Affected Products : excel_viewer
    • Published: Mar. 11, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0110

    Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.... Read more

    Affected Products : office
    • Published: Mar. 11, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0109

    Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors a... Read more

    Affected Products : office word
    • Published: Feb. 12, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    CRITICAL
    CVE-2025-7426

    Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In envir... Read more

    Affected Products :
    • Published: Aug. 25, 2025
    • Modified: Aug. 25, 2025
    • Vuln Type: Information Disclosure
  • 9.3

    HIGH
    CVE-2008-0111

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Re... Read more

    • Published: Mar. 11, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0104

    Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."... Read more

    Affected Products : office publisher
    • Published: Feb. 12, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0103

    Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error,... Read more

    Affected Products : office
    • Published: Feb. 13, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0011

    Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafte... Read more

    • Published: Jun. 12, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-0017

    The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash... Read more

    • Published: Nov. 13, 2008
    • Modified: Apr. 09, 2025
Showing 20 of 294836 Results