Latest CVE Feed
-
10.0
HIGHCVE-2011-1519
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbit... Read more
Affected Products : lotus_domino- EPSS Score: %14.00
- Published: Mar. 25, 2011
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2004-1137
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter... Read more
- EPSS Score: %15.82
- Published: Jan. 10, 2005
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2020-15922
There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.... Read more
Affected Products : eframework- EPSS Score: %79.17
- Published: Jul. 24, 2020
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2020-15920
There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required.... Read more
Affected Products : eframework- EPSS Score: %93.93
- Published: Jul. 24, 2020
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2020-15903
An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some included files were editable by nagios user. This issue was fixed in version 5.7.3.... Read more
Affected Products : nagios_xi- EPSS Score: %5.53
- Published: Sep. 09, 2020
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2004-1264
Buffer overflow in the simplify_path function in config.c for ChBg 1.5 allows remote attackers to execute arbitrary code via a crafted chbg scenario file.... Read more
Affected Products : chbg- EPSS Score: %7.34
- Published: Jan. 10, 2005
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2016-1125
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service... Read more
- EPSS Score: %5.11
- Published: May. 11, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2009-2469
Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possi... Read more
Affected Products : firefox- EPSS Score: %4.36
- Published: Jul. 22, 2009
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2015-3048
Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unknown vectors.... Read more
- EPSS Score: %11.90
- Published: May. 13, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-3111
Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.... Read more
- EPSS Score: %49.83
- Published: Jun. 24, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-3121
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers... Read more
- EPSS Score: %8.78
- Published: Jul. 09, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2011-1300
The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome... Read more
- EPSS Score: %5.56
- Published: Apr. 15, 2011
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2020-15836
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function passes untrusted data to the operating system without proper sanitization. A crafted request can be sent to execute arbitrary commands as root.... Read more
- EPSS Score: %0.94
- Published: Feb. 01, 2021
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2009-2665
The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary Java... Read more
Affected Products : firefox- EPSS Score: %1.62
- Published: Aug. 04, 2009
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2020-15744
Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420 firmware version 1.2.2 and prior versions.... Read more
- EPSS Score: %0.37
- Published: Aug. 30, 2021
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2011-1306
Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors.... Read more
Affected Products : chrome_os- EPSS Score: %0.17
- Published: Mar. 08, 2011
- Modified: Apr. 11, 2025
-
10.0
HIGHCVE-2008-5017
Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash)... Read more
- EPSS Score: %17.42
- Published: Nov. 13, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1825
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, aka AS03.... Read more
- EPSS Score: %0.93
- Published: Apr. 16, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-4095
Multiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown impact and attack vectors, different vulnerabilities than CVE-2007-6713.... Read more
Affected Products : flip4mac_wmv- EPSS Score: %0.76
- Published: Sep. 16, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2012-4301
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the Februa... Read more
Affected Products : javafx- EPSS Score: %4.96
- Published: Feb. 02, 2013
- Modified: Apr. 11, 2025