Latest CVE Feed
-
10.0
HIGHCVE-2015-6598
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23306638.... Read more
Affected Products : android- EPSS Score: %1.40
- Published: Oct. 06, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-6601
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234.... Read more
Affected Products : android- EPSS Score: %1.47
- Published: Oct. 06, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2012-5249
Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adob... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows adobe_air adobe_air_sdk flash_player_for_android- EPSS Score: %6.41
- Published: Oct. 09, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-5286
Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adob... Read more
Affected Products : android linux_kernel flash_player mac_os_x windows adobe_air adobe_air_sdk flash_player_for_android- EPSS Score: %6.41
- Published: Nov. 13, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-5088
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.... Read more
- EPSS Score: %79.26
- Published: Oct. 16, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-3959
Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to... Read more
Affected Products : firefox firefox_esr thunderbird ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_eus +6 more products- EPSS Score: %3.52
- Published: Aug. 29, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-4159
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-... Read more
- EPSS Score: %19.38
- Published: Aug. 15, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-3282
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468.... Read more
- EPSS Score: %40.32
- Published: Feb. 06, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2015-6552
The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and... Read more
- EPSS Score: %2.16
- Published: May. 07, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2012-2803
Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value.... Read more
- EPSS Score: %0.56
- Published: Sep. 10, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-2800
Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "tile size ... mismatches paramet... Read more
- EPSS Score: %0.84
- Published: Sep. 10, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-1126
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property dat... Read more
- EPSS Score: %3.43
- Published: Apr. 25, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-3143
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, rela... Read more
- EPSS Score: %12.62
- Published: Oct. 16, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2012-0751
The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.... Read more
- EPSS Score: %4.24
- Published: Feb. 16, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2015-6490
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors.... Read more
- EPSS Score: %0.92
- Published: Oct. 28, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-6476
Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.... Read more
Affected Products : eki-1321_series_firmware eki-1322_series_firmware eki-1361_series_firmware eki-1362_series_firmware eki-122x_series_firmware eki-1221 eki-1221d eki-1222 eki-1222d eki-1224 +4 more products- EPSS Score: %0.28
- Published: Nov. 07, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2011-4862
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute a... Read more
- EPSS Score: %92.58
- Published: Dec. 25, 2011
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2011-4791
DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field.... Read more
Affected Products : data_protector_media_operations- EPSS Score: %25.78
- Published: Feb. 03, 2012
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2015-6473
WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.... Read more
- EPSS Score: %2.91
- Published: Aug. 22, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2020-8599
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit t... Read more
- Actively Exploited
- EPSS Score: %58.42
- Published: Mar. 18, 2020
- Modified: Feb. 12, 2025