Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 10.0

    HIGH
    CVE-2019-7768

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful ex... Read more

    • EPSS Score: %17.20
    • Published: May. 22, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7767

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful ex... Read more

    • EPSS Score: %2.07
    • Published: May. 22, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7763

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful ex... Read more

    • EPSS Score: %2.07
    • Published: May. 22, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7765

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful ex... Read more

    • EPSS Score: %2.07
    • Published: May. 22, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7784

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a double free vulnerability. Successful explo... Read more

    • EPSS Score: %5.46
    • Published: May. 22, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7764

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Succe... Read more

    • EPSS Score: %2.07
    • Published: May. 22, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2003-0972

    Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.... Read more

    Affected Products : screen
    • EPSS Score: %1.21
    • Published: Dec. 15, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-1083

    Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.... Read more

    Affected Products : monit
    • EPSS Score: %55.81
    • Published: Dec. 31, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0903

    Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.... Read more

    Affected Products : data_access_components
    • EPSS Score: %69.00
    • Published: Feb. 17, 2004
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2019-7791

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful ex... Read more

    • EPSS Score: %2.07
    • Published: May. 22, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7684

    inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadController#gok4 (com/inxedu/os/common/controller/VideoUploadController.java). The... Read more

    Affected Products : inxedu
    • EPSS Score: %0.72
    • Published: Feb. 09, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2003-0886

    Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.... Read more

    Affected Products : hylafax
    • EPSS Score: %7.43
    • Published: Dec. 01, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    CRITICAL
    CVE-2019-7609

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to... Read more

    Affected Products : openshift_container_platform kibana
    • Actively Exploited
    • EPSS Score: %94.39
    • Published: Mar. 25, 2019
    • Modified: Mar. 13, 2025
  • 10.0

    HIGH
    CVE-2015-6988

    The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement.... Read more

    Affected Products : mac_os_x iphone_os
    • EPSS Score: %11.01
    • Published: Oct. 23, 2015
    • Modified: Apr. 12, 2025
  • 10.0

    HIGH
    CVE-2003-0784

    Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.... Read more

    Affected Products : aix
    • EPSS Score: %1.20
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0640

    BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges.... Read more

    Affected Products : weblogic_server
    • EPSS Score: %0.65
    • Published: Aug. 27, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0588

    admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.... Read more

    Affected Products : digi-news
    • EPSS Score: %2.56
    • Published: Aug. 18, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2008-3908

    Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-sup... Read more

    Affected Products : wordnet
    • EPSS Score: %3.84
    • Published: Sep. 04, 2008
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2003-0560

    SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.... Read more

    Affected Products : vp-asp
    • EPSS Score: %0.59
    • Published: Aug. 18, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0494

    password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.... Read more

    Affected Products : snitz_forums_2000
    • EPSS Score: %0.93
    • Published: Aug. 07, 2003
    • Modified: Apr. 03, 2025
Showing 20 of 292485 Results