Latest CVE Feed
-
10.0
HIGHCVE-2008-1827
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) Advanced Pricing component, aka (1) APP02, (2) APP03, and (3) APP09; (b) Application Object Library component, aka (... Read more
- Published: Apr. 16, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1809
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."... Read more
Affected Products : edirectory- Published: Jul. 14, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1831
Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka (1) SEBL01, (2) SEBL02, (3) SEBL03, (4) SEBL04, (5) SEBL05, and (6) SEBL06.... Read more
Affected Products : siebel_enterprise- Published: Apr. 16, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2019-1913
Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the ... Read more
Affected Products : sf-220-24_firmware sf220-24p_firmware sf220-48_firmware sf220-48p_firmware sg220-26_firmware sg220-26p_firmware sg220-28_firmware sg220-28mp_firmware sg220-50_firmware sg220-50p_firmware +12 more products- Published: Aug. 07, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2019-7992
Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Aug. 26, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2008-1766
Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to "two minor security-related bugs."... Read more
Affected Products : phpbb- Published: Apr. 12, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2019-1821
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operat... Read more
- Published: May. 16, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2017-16926
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.... Read more
Affected Products : ohcount- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2019-1723
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privilege... Read more
Affected Products : common_services_platform_collector- Published: Mar. 13, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2008-1704
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.... Read more
- Published: Apr. 11, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1697
Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topol... Read more
Affected Products : openview_network_node_manager- Published: Apr. 08, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1681
Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege.... Read more
Affected Products : db2_content_manager- Published: Apr. 04, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1690
WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: s... Read more
Affected Products : slmail_pro- Published: Apr. 07, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1668
ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote att... Read more
Affected Products : hp-ux- Published: Aug. 13, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2005-4730
Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds.... Read more
Affected Products : text_password- Published: Dec. 31, 2005
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2008-1666
Unspecified vulnerability in HP Oracle for OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, and 10gR2 has unknown impact and attack vectors, possibly related to the July 2008 Oracle Critical Patch Update.... Read more
Affected Products : oracle_for_openview- Published: Jul. 17, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1661
Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.... Read more
Affected Products : storageworks_storage_mirroring- Published: Jun. 04, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1662
Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an "empty systems list."... Read more
- Published: Aug. 01, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2008-1633
Unspecified vulnerability in Mondo Rescue before 2.2.5 has unknown impact and attack vectors, related to the use of (1) /tmp and (2) MINDI_CACHE.... Read more
Affected Products : rescue- Published: Apr. 02, 2008
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2019-1620
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in... Read more
- Published: Jun. 27, 2019
- Modified: Nov. 21, 2024