Latest CVE Feed
-
10.0
HIGHCVE-2016-1930
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via... Read more
- Published: Jan. 31, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2016-1635
extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of servi... Read more
Affected Products : chrome- Published: Mar. 06, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7716
libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873.... Read more
Affected Products : android- Published: Oct. 06, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7640
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler- Published: Oct. 18, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7637
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler- Published: Oct. 18, 2015
- Modified: Apr. 12, 2025
-
10.0
CRITICALCVE-2021-0248
This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administra... Read more
- Published: Apr. 22, 2021
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2015-7635
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler- Published: Oct. 18, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7625
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute a... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler- Published: Oct. 14, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7626
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute a... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler- Published: Oct. 14, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7627
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute a... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler- Published: Oct. 15, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2016-10152
The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache.... Read more
Affected Products : hesiod- Published: Mar. 28, 2017
- Modified: Apr. 20, 2025
-
10.0
CRITICALCVE-2021-0211
An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route adver... Read more
- Published: Jan. 15, 2021
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2016-0705
Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact v... Read more
- Published: Mar. 03, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2016-0693
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module.... Read more
Affected Products : solaris- Published: Apr. 21, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7638
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler- Published: Oct. 18, 2015
- Modified: Apr. 12, 2025
-
10.0
CRITICALCVE-2015-7541
The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth v... Read more
Affected Products : colorscore- Published: Jan. 08, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-7450
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransf... Read more
- Actively Exploited
- Published: Jan. 02, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-8424
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler befor... Read more
Affected Products : android linux_kernel flash_player mac_os_x iphone_os windows air air_sdk air_sdk_\&_compiler- Published: Dec. 10, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-8406
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler befor... Read more
Affected Products : android linux_kernel flash_player mac_os_x iphone_os windows air air_sdk air_sdk_\&_compiler- Published: Dec. 10, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-8046
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.... Read more
Affected Products : android linux_kernel flash_player mac_os_x iphone_os windows air air_sdk air_sdk_\&_compiler- Published: Nov. 11, 2015
- Modified: Apr. 12, 2025