Latest CVE Feed
-
10.0
HIGHCVE-2014-8579
TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via an FTP session.... Read more
- Published: Jan. 05, 2018
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2014-8458
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8454
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8455 and CVE-2014-9165.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8455
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-9165.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8456
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8445
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8446, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8459
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8443
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8446
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8441
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to ... Read more
- Published: Nov. 11, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8457
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8460 and CVE-2014-9159.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8389
cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v... Read more
- Published: Dec. 28, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2014-8439
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to ... Read more
Affected Products : linux_kernel macos flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler air_sdk_and_compiler- Actively Exploited
- Published: Nov. 25, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8361
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.... Read more
Affected Products : dir-615_firmware dir-605l_firmware dir-619l_firmware dir-615 dir-905l_firmware dir-600l_firmware realtek_sdk dir-809_firmware wf800hp_firmware dir-605l +41 more products- Actively Exploited
- Published: May. 01, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8461
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8449
Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8423
Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.... Read more
Affected Products : vap2500_firmware- Published: Nov. 28, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8329
Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain access data for the ftp and telnet services via a direct request for ZT... Read more
- Published: Oct. 20, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2022-30525
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 ... Read more
Affected Products : usg20w-vpn_firmware usg_flex_100w_firmware usg_flex_200_firmware usg_flex_500_firmware usg_flex_50w_firmware usg_flex_700_firmware vpn100_firmware vpn1000_firmware vpn300_firmware vpn50_firmware +22 more products- Actively Exploited
- Published: May. 12, 2022
- Modified: Mar. 13, 2025
-
10.0
HIGHCVE-2014-8516
Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.... Read more
Affected Products : netcharts_server- Published: Jan. 03, 2020
- Modified: Nov. 21, 2024