Latest CVE Feed
-
9.3
HIGHCVE-2017-2939
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing a malformed cross-reference table. Successful exploitation could lead to arbitrary co... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-2938
Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2937
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2936
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2935
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2934
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2933
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2932
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2931
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2930
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2928
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2927
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2926
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2925
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution.... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-0004
The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request, aka "Local Sec... Read more
- Published: Jan. 10, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0003
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."... Read more
- Published: Jan. 10, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-0002
Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."... Read more
Affected Products : edge- Published: Jan. 10, 2017
- Modified: Apr. 20, 2025
-
5.9
MEDIUMCVE-2016-9247
Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart.... Read more
Affected Products : big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system big-ip_link_controller big-ip_local_traffic_manager big-ip_policy_enforcement_manager big-ip_websafe- Published: Jan. 10, 2017
- Modified: Apr. 20, 2025
-
6.1
MEDIUMCVE-2016-6837
Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-beta1, 1.3.0-beta1 allows remote attackers to inject arbitrary web script or HTML via the 'view_type' parameter.... Read more
Affected Products : mantisbt- Published: Jan. 10, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2016-6831
The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exhaustion or a denial of service. This affects all release... Read more
Affected Products : chicken- Published: Jan. 10, 2017
- Modified: Apr. 20, 2025