Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 10.0

    HIGH
    CVE-2016-10391

    In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.... Read more

    Affected Products : android
    • EPSS Score: %0.15
    • Published: Aug. 18, 2017
    • Modified: Apr. 20, 2025
  • 10.0

    HIGH
    CVE-2016-10473

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, ... Read more

    • EPSS Score: %0.23
    • Published: Apr. 18, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2003-1339

    Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and ... Read more

    Affected Products : ezmeeting
    • EPSS Score: %25.25
    • Published: Dec. 31, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2014-5401

    Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the Me... Read more

    Affected Products : mednet
    • EPSS Score: %1.72
    • Published: Mar. 26, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2016-2002

    The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.... Read more

    Affected Products : vertica
    • EPSS Score: %9.45
    • Published: Apr. 20, 2016
    • Modified: Apr. 12, 2025
  • 10.0

    HIGH
    CVE-2003-1509

    Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file befo... Read more

    • EPSS Score: %0.72
    • Published: Dec. 31, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2008-0405

    Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remote attackers to create arbitrary (1) files and (2) directories via a .. (dot dot) in an account name, when requesti... Read more

    Affected Products : http_file_server http_file_server
    • EPSS Score: %1.26
    • Published: Jan. 29, 2008
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2016-4898

    The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors.... Read more

    Affected Products : novabackup_datacenter
    • EPSS Score: %4.48
    • Published: Apr. 13, 2017
    • Modified: Apr. 20, 2025
  • 10.0

    HIGH
    CVE-2016-5080

    Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running ... Read more

    Affected Products : asn1c
    • EPSS Score: %40.64
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025
  • 10.0

    HIGH
    CVE-2008-0550

    Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.... Read more

    Affected Products : steamcast
    • EPSS Score: %68.16
    • Published: Feb. 01, 2008
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2005-3957

    Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors.... Read more

    Affected Products : dotclear
    • EPSS Score: %0.45
    • Published: Dec. 01, 2005
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2008-0647

    Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the... Read more

    • EPSS Score: %7.15
    • Published: Feb. 07, 2008
    • Modified: Apr. 09, 2025
  • 10.0

    HIGH
    CVE-2016-6536

    The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge of a handle parameter value.... Read more

    Affected Products : eh6108h\+_firmware eh6108h\+
    • EPSS Score: %0.80
    • Published: Sep. 19, 2016
    • Modified: Apr. 12, 2025
  • 10.0

    HIGH
    CVE-2016-7112

    A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module :... Read more

    • EPSS Score: %0.52
    • Published: Sep. 06, 2016
    • Modified: Apr. 12, 2025
  • 10.0

    HIGH
    CVE-2004-0636

    Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.... Read more

    Affected Products : instant_messenger
    • EPSS Score: %78.52
    • Published: Nov. 23, 2004
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2015-1845

    Buffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute arbitrary code via unspecified vectors.... Read more

    Affected Products : unzoo
    • EPSS Score: %10.96
    • Published: May. 19, 2015
    • Modified: Apr. 12, 2025
  • 10.0

    HIGH
    CVE-2016-8364

    An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.12b. Object memory can read a network packet that is larger than the space that is available, a Heap-based Buffer Overflow.... Read more

    Affected Products : s7-softplc
    • EPSS Score: %0.65
    • Published: Feb. 13, 2017
    • Modified: Apr. 20, 2025
  • 10.0

    HIGH
    CVE-2016-8440

    Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android. Versions: Kernel 3.18. Android ID: A-31625306. References: QC-CR#1036747.... Read more

    Affected Products : android linux_kernel
    • EPSS Score: %0.53
    • Published: Jan. 12, 2017
    • Modified: Apr. 20, 2025
  • 10.0

    HIGH
    CVE-2017-1000235

    I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised.... Read more

    Affected Products : i_librarian
    • EPSS Score: %11.63
    • Published: Nov. 17, 2017
    • Modified: Apr. 20, 2025
  • 10.0

    HIGH
    CVE-2008-3338

    Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker ... Read more

    • EPSS Score: %5.38
    • Published: Aug. 13, 2008
    • Modified: Apr. 09, 2025
Showing 20 of 292325 Results