Latest CVE Feed
-
10.0
CRITICALCVE-2020-26301
ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lead to remote code execution if a client of the library ca... Read more
- Published: Sep. 20, 2021
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2008-0040
Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trigger memory corruption.... Read more
Affected Products : mac_os_x- Published: Feb. 12, 2008
- Modified: Apr. 09, 2025
-
10.0
CRITICALCVE-2020-26282
BrowserUp Proxy allows you to manipulate HTTP requests and responses, capture HTTP content, and export performance data as a HAR file. BrowserUp Proxy works well as a standalone proxy server, but it is especially useful when embedded in Selenium tests. A ... Read more
Affected Products : browserup_proxy- Published: Dec. 24, 2020
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2013-2728
Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.... Read more
Affected Products : android linux_kernel enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_eus flash_player mac_os_x opensuse +4 more products- Published: May. 16, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2729
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.... Read more
- Actively Exploited
- Published: May. 16, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2751
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "fo... Read more
Affected Products : raidiator- Published: Dec. 12, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2719
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-20... Read more
- Published: May. 16, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2722
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-20... Read more
- Published: May. 16, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2718
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2719, CVE-20... Read more
- Published: May. 16, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2727
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2729.... Read more
- Published: May. 16, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2603
The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a ... Read more
Affected Products : realarcade_installer- Published: Jan. 12, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2019-10883
Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.... Read more
- Published: Jun. 03, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2010-3569
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE:... Read more
- Published: Oct. 19, 2010
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2579
TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a... Read more
- Published: Oct. 11, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2578
cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerN... Read more
- Published: Oct. 11, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2558
Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service (reboot) or possibly have unknown other impact via a crafted TrueType Font (TTF) file, as demonstrated by the 120612-69701-01.dmp error report.... Read more
Affected Products : windows_8- Published: Mar. 13, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2512
The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.... Read more
Affected Products : ftpd- Published: Jan. 26, 2021
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2013-2470
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and a... Read more
- Published: Jun. 18, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2469
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and a... Read more
- Published: Jun. 18, 2013
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2013-2472
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and a... Read more
- Published: Jun. 18, 2013
- Modified: Apr. 11, 2025