Latest CVE Feed
-
7.5
HIGHCVE-2017-0839
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64478003.... Read more
Affected Products : android- EPSS Score: %0.14
- Published: Nov. 16, 2017
- Modified: Apr. 20, 2025
-
5.4
MEDIUMCVE-2017-15947
Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp.... Read more
Affected Products : simple_asc_content_management_system- EPSS Score: %0.21
- Published: Oct. 28, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-0804
A elevation of privilege vulnerability in the MediaTek mmc driver. Product: Android. Versions: Android kernel. Android ID: A-36274676. References: M-ALPS03361487.... Read more
Affected Products : android- EPSS Score: %0.08
- Published: Sep. 08, 2017
- Modified: Apr. 20, 2025
-
4.3
MEDIUMCVE-2017-0709
A information disclosure vulnerability in the HTC sensor hub driver. Product: Android. Versions: Android kernel. Android ID: A-35468048.... Read more
Affected Products : android- EPSS Score: %0.05
- Published: Jul. 06, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-0686
A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231.... Read more
Affected Products : android- EPSS Score: %0.04
- Published: Jul. 06, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0680
A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37008096.... Read more
Affected Products : android- EPSS Score: %0.21
- Published: Jul. 06, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0678
A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36576151.... Read more
Affected Products : android- EPSS Score: %0.25
- Published: Jul. 06, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-0639
An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that iso... Read more
Affected Products : android- EPSS Score: %0.11
- Published: Jun. 14, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0637
A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code... Read more
Affected Products : android- EPSS Score: %0.84
- Published: Jun. 14, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-0626
An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without ... Read more
- EPSS Score: %0.20
- Published: May. 12, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-15777
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."... Read more
- EPSS Score: %0.36
- Published: Oct. 22, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2016-9049
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server process to dereference a null pointer. An attacker can simply connect to a TCP port... Read more
Affected Products : database_server- EPSS Score: %0.84
- Published: Feb. 21, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0563
An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device... Read more
- EPSS Score: %0.18
- Published: Apr. 07, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-0548
A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versi... Read more
Affected Products : android- EPSS Score: %0.30
- Published: Apr. 07, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2015-5473
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to (1) upload/updateDriver or (2) upload/addDriver or to execute arbitrary code with SYSTEM privilege... Read more
Affected Products : syncthru_6- EPSS Score: %46.93
- Published: Jun. 01, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2015-5436
A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service (DoS). Note this was or... Read more
- EPSS Score: %0.55
- Published: May. 11, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2015-5401
Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow remote attackers to cause a denial of service (database crash) via a malformed CONFIG REQUEST message.... Read more
- EPSS Score: %1.26
- Published: May. 23, 2017
- Modified: Apr. 20, 2025
-
7.6
HIGHCVE-2017-0443
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged pro... Read more
- EPSS Score: %0.14
- Published: Feb. 08, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-0389
A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android.... Read more
Affected Products : android- EPSS Score: %0.34
- Published: Jan. 12, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-0374
lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array.... Read more
Affected Products : config-model- EPSS Score: %0.04
- Published: May. 23, 2017
- Modified: Apr. 20, 2025