Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 10.0

    HIGH
    CVE-2002-1360

    Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to ... Read more

    • EPSS Score: %4.13
    • Published: Dec. 23, 2002
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2006-5360

    Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka Vuln# FORM03.... Read more

    Affected Products : application_server
    • EPSS Score: %0.96
    • Published: Oct. 18, 2006
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-1999-0113

    Some implementations of rlogin allow root access if given a -froot parameter.... Read more

    Affected Products : aix
    • EPSS Score: %18.66
    • Published: May. 23, 1994
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0246

    HP Remote Watch allows a remote user to gain root access.... Read more

    Affected Products : hp-ux
    • EPSS Score: %0.73
    • Published: Oct. 01, 1996
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0356

    Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync,... Read more

    Affected Products : ethereal
    • EPSS Score: %28.41
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2006-6839

    Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets."... Read more

    Affected Products : phpbb phpbb
    • EPSS Score: %0.43
    • Published: Dec. 31, 2006
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2007-0460

    Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors related to "improper string length calculations."... Read more

    Affected Products : suse_linux
    • EPSS Score: %0.53
    • Published: Jan. 24, 2007
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2020-25218

    Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface.... Read more

    • EPSS Score: %0.36
    • Published: Mar. 29, 2021
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2007-0449

    Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote atta... Read more

    • EPSS Score: %81.66
    • Published: Jan. 23, 2007
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2013-1371

    Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.... Read more

    • EPSS Score: %3.72
    • Published: Mar. 13, 2013
    • Modified: Apr. 11, 2025
  • 10.0

    HIGH
    CVE-2013-1368

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and ... Read more

    • EPSS Score: %4.19
    • Published: Feb. 12, 2013
    • Modified: Apr. 11, 2025
  • 10.0

    HIGH
    CVE-2013-1377

    Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.... Read more

    Affected Products : digital_editions
    • EPSS Score: %11.43
    • Published: Jul. 31, 2013
    • Modified: Apr. 11, 2025
  • 10.0

    HIGH
    CVE-2020-25187

    Medtronic MyCareLink Smart 25000 is  vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software stack. The heap overflow could allo... Read more

    • EPSS Score: %0.90
    • Published: Dec. 14, 2020
    • Modified: May. 22, 2025
  • 10.0

    HIGH
    CVE-2013-1370

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and ... Read more

    • EPSS Score: %4.19
    • Published: Feb. 12, 2013
    • Modified: Apr. 11, 2025
  • 10.0

    HIGH
    CVE-2013-1475

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, ... Read more

    Affected Products : jdk jre jre jdk
    • EPSS Score: %1.17
    • Published: Feb. 02, 2013
    • Modified: Apr. 11, 2025
  • 10.0

    HIGH
    CVE-2013-1405

    VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not pr... Read more

    • EPSS Score: %0.90
    • Published: Feb. 15, 2013
    • Modified: Apr. 11, 2025
  • 10.0

    HIGH
    CVE-2013-1386

    Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1384.... Read more

    Affected Products : shockwave_player
    • EPSS Score: %15.16
    • Published: Apr. 10, 2013
    • Modified: Apr. 11, 2025
  • 10.0

    HIGH
    CVE-2013-1360

    An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the S... Read more

    • EPSS Score: %57.72
    • Published: Feb. 11, 2020
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2007-1794

    The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this i... Read more

    Affected Products : solaris sunos mozilla
    • EPSS Score: %3.32
    • Published: Apr. 02, 2007
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2013-1373

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and ... Read more

    • EPSS Score: %4.19
    • Published: Feb. 12, 2013
    • Modified: Apr. 11, 2025
Showing 20 of 292737 Results