Skip to main content

Buffer Overflow

39088 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2017-6738 Jul 17, 21:29 HIGH KEV THREAT Act Now

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 14.1%.

RCE Buffer Overflow Apple Cisco
NVD
CVSS 3.1
8.8
EPSS
14.1%
CVE-2017-6737 Jul 17, 21:29 HIGH KEV THREAT Act Now

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 14.1%.

RCE Buffer Overflow Cisco Ios Xe
NVD
CVSS 3.1
8.8
EPSS
14.1%
CVE-2017-6736 Jul 17, 21:29 HIGH POC KEV THREAT Act Now

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Apple Cisco
NVD GitHub Exploit-DB
CVSS 3.1
8.8
EPSS
89.0%
Threat
7.4
CVE-2017-3631 Jun 22, 13:29 MEDIUM POC PATCH THREAT This Month

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated medium severity (CVSS 5.3), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 10.9%.

Buffer Overflow Denial Of Service Oracle Solaris
NVD Exploit-DB
CVSS 3.0
5.3
EPSS
10.9%
CVE-2017-3630 Jun 22, 13:29 MEDIUM POC PATCH THREAT This Month

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated medium severity (CVSS 5.3), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 10.9%.

Buffer Overflow Denial Of Service Memory Corruption Oracle Solaris
NVD Exploit-DB
CVSS 3.0
5.3
EPSS
10.9%
CVE-2017-3629 Jun 22, 13:29 HIGH POC PATCH THREAT Act Now

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 29.4%.

Buffer Overflow Oracle Solaris
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
29.4%
CVE-2017-1000364 Jun 19, 16:29 HIGH POC Act Now

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Buffer Overflow Linux Linux Kernel
NVD Exploit-DB
CVSS 3.0
7.4
EPSS
3.1%
CVE-2017-9544 Jun 12, 06:29 CRITICAL POC THREAT Emergency

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 79.6%.

RCE Buffer Overflow Memory Corruption Easy Chat Server Echatserver
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
79.6%
Threat
5.8
CVE-2017-8540 May 26, 20:29 HIGH POC KEV PATCH THREAT Act Now

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Memory Corruption Microsoft
NVD Exploit-DB
CVSS 3.1
7.8
EPSS
84.6%
Threat
7.1
CVE-2017-6862 May 26, 20:29 CRITICAL KEV THREAT Emergency

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 37.5%.

Authentication Bypass RCE Buffer Overflow Netgear
NVD
CVSS 3.1
9.8
EPSS
37.5%
Threat
4.6
CVE-2017-0222 May 12, 14:29 HIGH KEV PATCH THREAT Act Now

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 62.0%.

RCE Buffer Overflow Memory Corruption Microsoft
NVD
CVSS 3.1
8.8
EPSS
62.0%
Threat
5.1
CVE-2017-6553 Apr 29, 16:59 CRITICAL POC PATCH THREAT Act Now

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 74.0%.

Buffer Overflow Privilege Manager For Unix Quest
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
74.0%
Threat
5.7
CVE-2017-5030 Apr 24, 23:59 HIGH POC KEV THREAT Act Now

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Information Disclosure Chrome Google +7
NVD
CVSS 3.1
8.8
EPSS
50.7%
Threat
6.3
CVE-2014-3931 Mar 31, 16:59 CRITICAL POC KEV THREAT Emergency

fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Multi Router Looking Glass
NVD
CVSS 3.1
9.8
EPSS
35.6%
Threat
6.0
CVE-2017-7310 Mar 29, 21:59 HIGH POC THREAT Act Now

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 86.6%.

RCE Buffer Overflow Diskboss Syncbreeze Disksorter +1
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
86.6%
Threat
5.7
CVE-2017-7308 Mar 29, 20:59 HIGH POC THREAT Act Now

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 87.0%.

Buffer Overflow Denial Of Service Linux Linux Kernel
NVD Exploit-DB
CVSS 3.1
7.8
EPSS
87.0%
Threat
5.7
CVE-2017-7269 Mar 27, 02:59 CRITICAL POC KEV PATCH THREAT Act Now

Remote code execution in Microsoft IIS 6.0 WebDAV service allows unauthenticated attackers to execute arbitrary code by sending a specially crafted PROPFIND request with a malicious 'If' header. Confirmed actively exploited (CISA KEV) since July-August 2016, predating public disclosure by 7+ months. EPSS score of 94.43% (100th percentile) reflects widespread exploitation against legacy Windows Server 2003 R2 systems still exposed to the internet. Multiple public exploits exist including Metasploit modules, and vendor patch has been available since March 2017.

RCE Buffer Overflow Microsoft
NVD GitHub Exploit-DB
CVSS 3.1
9.8
EPSS
94.4%
Threat
9.8
CVE-2017-7230 Mar 22, 18:59 CRITICAL POC THREAT Emergency

A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 65.6%.

RCE Buffer Overflow Disk Sorter Disksorter
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
65.6%
Threat
5.4
CVE-2017-0149 Mar 17, 00:59 HIGH KEV PATCH THREAT Act Now

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 41.5%.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD
CVSS 3.1
8.8
EPSS
41.5%
Threat
4.5
CVE-2017-0101 Mar 17, 00:59 HIGH POC KEV PATCH THREAT Act Now

The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Microsoft
NVD Exploit-DB
CVSS 3.1
7.8
EPSS
67.2%
Threat
6.6
CVE-2017-0022 Mar 17, 00:59 MEDIUM POC KEV PATCH THREAT Act Now

Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Information Disclosure Microsoft
NVD
CVSS 3.1
6.5
EPSS
44.1%
Threat
5.6
CVE-2017-6465 Mar 10, 01:59 CRITICAL POC THREAT Emergency

Remote Code Execution was discovered in FTPShell Client 6.53. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 80.5%.

RCE Buffer Overflow Ftpshell Ftpshell Client
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
80.5%
Threat
5.9
CVE-2017-6416 Mar 06, 02:59 CRITICAL POC THREAT Emergency

An issue was discovered in SysGauge 1.5.18. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 64.6%.

RCE Buffer Overflow Sysgauge Flexense
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
64.6%
Threat
5.4
CVE-2017-6187 Feb 22, 23:59 CRITICAL POC THREAT Emergency

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 69.4%.

RCE Buffer Overflow Disksavvy Disksavvy Enterprise
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
69.4%
Threat
5.5
CVE-2017-3823 Feb 01, 11:59 HIGH POC THREAT Act Now

An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 80.4%.

RCE Buffer Overflow Chrome Google Microsoft +8
NVD
CVSS 3.0
8.8
EPSS
80.4%
Threat
5.7
CVE-2016-10174 Jan 30, 04:59 CRITICAL POC KEV THREAT Emergency

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Netgear
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
91.1%
Threat
7.7
CVE-2016-5198 Jan 19, 05:59 HIGH POC KEV THREAT Act Now

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Information Disclosure Chrome Google +5
NVD
CVSS 3.1
8.8
EPSS
77.9%
Threat
7.1
CVE-2016-7201 Nov 10, 06:59 NuGet HIGH POC KEV PATCH THREAT Act Now

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD GitHub Exploit-DB
CVSS 3.1
8.8
EPSS
90.1%
Threat
7.5
CVE-2016-7200 Nov 10, 06:59 NuGet HIGH POC KEV PATCH THREAT Act Now

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD GitHub Exploit-DB
CVSS 3.1
8.8
EPSS
88.2%
Threat
7.4
CVE-2016-7193 Oct 14, 02:59 HIGH KEV PATCH THREAT Act Now

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 71.2%.

RCE Buffer Overflow Microsoft
NVD
CVSS 3.1
7.8
EPSS
71.2%
Threat
5.2
CVE-2016-4657 Aug 25, 21:59 HIGH POC KEV THREAT Act Now

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Apple
NVD Exploit-DB
CVSS 3.1
8.8
EPSS
77.1%
Threat
7.1
CVE-2016-4656 Aug 25, 21:59 HIGH POC KEV THREAT Act Now

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Apple
NVD Exploit-DB
CVSS 3.1
7.8
EPSS
66.7%
Threat
6.6
CVE-2016-6366 Aug 18, 18:59 HIGH POC KEV THREAT Act Now

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Cisco
NVD GitHub Exploit-DB
CVSS 3.1
8.8
EPSS
91.4%
Threat
7.5
CVE-2016-4998 Jul 03, 21:59 HIGH POC PATCH Act Now

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. Public exploit code available.

Buffer Overflow Denial Of Service Linux Oracle Canonical +2
NVD GitHub
CVSS 3.0
7.1
EPSS
1.5%
CVE-2016-4997 Jul 03, 21:59 HIGH POC PATCH Act Now

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Buffer Overflow Denial Of Service Linux Debian +13
NVD GitHub Exploit-DB
CVSS 3.1
7.8
EPSS
4.8%
CVE-2016-4523 Jun 09, 10:59 HIGH KEV THREAT Act Now

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 67.0%.

Buffer Overflow Denial Of Service Information Disclosure Vtscada Trihedral
NVD VulDB
CVSS 3.1
7.5
EPSS
67.0%
Threat
5.0
CVE-2016-0189 May 11, 01:59 HIGH POC KEV PATCH THREAT Act Now

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD Exploit-DB VulDB
CVSS 3.1
7.5
EPSS
90.8%
Threat
7.2
CVE-2016-1646 Mar 29, 10:59 HIGH POC KEV PATCH THREAT Act Now

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Denial Of Service Information Disclosure Chrome Google +13
NVD VulDB
CVSS 3.1
8.8
EPSS
66.5%
Threat
6.8
CVE-2016-0099 Mar 09, 11:59 HIGH POC KEV PATCH THREAT Act Now

Windows Secondary Logon Service improperly processes request handles, allowing local users to escalate privileges to SYSTEM on Windows Vista through Windows 10 via a crafted application.

Buffer Overflow Microsoft
NVD Exploit-DB VulDB
CVSS 3.1
7.8
EPSS
90.4%
Threat
9.3
CVE-2015-7768 Oct 09, 14:59 HIGH POC THREAT Act Now

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 74.6%.

RCE Buffer Overflow Ftp Utility Konicaminolta
NVD Exploit-DB
CVSS 2.0
7.5
EPSS
74.6%
Threat
5.2
CVE-2015-7243 Sep 18, 16:59 HIGH POC THREAT Act Now

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted WAV file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 73.3%.

RCE Buffer Overflow Denial Of Service Boxoft Wav To Mp3 Converter
NVD Exploit-DB
CVSS 2.0
7.5
EPSS
73.3%
Threat
5.2
CVE-2015-2546 Sep 09, 00:59 HIGH KEV PATCH THREAT Act Now

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 39.8%.

Buffer Overflow Microsoft Windows 10 1507 Windows Server 2008 Windows Server 2012 +6
NVD VulDB
CVSS 3.1
8.2
EPSS
39.8%
Threat
4.3
CVE-2015-1171 Aug 28, 21:59 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 76.9%.

RCE Buffer Overflow Sim Card Editor
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
76.9%
Threat
5.8
CVE-2015-2502 Aug 19, 10:59 HIGH POC KEV PATCH THREAT Act Now

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
8.8
EPSS
22.6%
Threat
5.4
CVE-2015-1642 Aug 15, 00:59 HIGH KEV PATCH THREAT Act Now

Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability.". Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 72.9%.

RCE Buffer Overflow Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
7.8
EPSS
72.9%
Threat
5.2
CVE-2015-2426 Jul 20, 18:59 HIGH POC KEV PATCH THREAT Act Now

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Microsoft Adobe
NVD Exploit-DB VulDB
CVSS 3.1
8.8
EPSS
91.8%
Threat
7.5
CVE-2015-2387 Jul 14, 22:59 HIGH KEV PATCH THREAT Act Now

The Adobe Type Manager Font Driver (ATMFD.DLL) in Windows contains a memory corruption vulnerability that allows local privilege escalation, exploited by the Duqu 2.0 malware in targeted attacks against diplomatic entities.

Buffer Overflow Memory Corruption Microsoft Adobe
NVD VulDB
CVSS 3.1
7.8
EPSS
31.2%
Threat
6.0
CVE-2015-2425 Jul 14, 21:59 HIGH KEV PATCH THREAT Act Now

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 34.1%.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
8.8
EPSS
34.1%
Threat
4.3
CVE-2015-2424 Jul 14, 21:59 HIGH KEV PATCH THREAT Act Now

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 76.5%.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
8.8
EPSS
76.5%
Threat
5.6
CVE-2015-2419 Jul 14, 21:59 HIGH POC KEV PATCH THREAT Act Now

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD Exploit-DB VulDB
CVSS 3.1
8.8
EPSS
69.4%
Threat
6.8
CVE-2015-5123 Jul 14, 10:59 CRITICAL KEV THREAT Emergency

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 47.6%.

RCE Buffer Overflow Denial Of Service Chrome Google +16
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
47.6%
Threat
4.9
CVE-2015-5122 Jul 14, 10:59 CRITICAL POC KEV THREAT Emergency

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Chrome Google +16
NVD Exploit-DB GitHub VulDB
CVSS 3.1
9.8
EPSS
92.8%
Threat
7.7
CVE-2015-5119 Jul 08, 14:59 CRITICAL POC KEV PATCH THREAT Act Now

Remote code execution in Adobe Flash Player 11.x through 18.x allows unauthenticated network attackers to execute arbitrary code via crafted Flash content exploiting a use-after-free flaw in the ByteArray class. Confirmed actively exploited (CISA KEV) in July 2015 following the Hacking Team data breach, which exposed weaponized exploit code targeting this vulnerability. With EPSS score of 93.21% (100th percentile) and publicly available proof-of-concept, this represents critical risk to unpatched Flash installations across Windows, OS X, and Linux platforms. Vendor-released patches available via Adobe APSB15-16.

RCE Buffer Overflow Denial Of Service Use After Free Memory Corruption +15
NVD GitHub Exploit-DB VulDB
CVSS 3.1
9.8
EPSS
93.2%
Threat
9.8
CVE-2015-3113 Jun 23, 21:59 CRITICAL POC KEV PATCH THREAT Act Now

Adobe Flash Player contains a heap-based buffer overflow that allows remote code execution, exploited as a zero-day in June 2015 by APT3 (a Chinese cyber espionage group) in phishing campaigns targeting aerospace and defense organizations.

RCE Buffer Overflow Memory Corruption Microsoft Adobe +18
NVD GitHub Exploit-DB VulDB
CVSS 3.1
9.8
EPSS
92.4%
Threat
9.7
CVE-2015-2797 Jun 19, 14:59 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.0%.

RCE Buffer Overflow Air Firmware Airties
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
77.0%
Threat
5.8
CVE-2015-3105 Jun 10, 01:59 CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 90.3%.

RCE Buffer Overflow Denial Of Service Google Microsoft +6
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
90.3%
Threat
6.2
CVE-2015-2360 Jun 10, 01:59 HIGH KEV PATCH THREAT Act Now

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 11.6%.

Buffer Overflow Denial Of Service Microsoft
NVD VulDB
CVSS 3.1
8.8
EPSS
11.6%
CVE-2015-3090 May 13, 11:00 CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 89.8%.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
89.8%
Threat
6.2
CVE-2015-3043 Apr 14, 22:59 CRITICAL POC KEV PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft +14
NVD Exploit-DB GitHub VulDB
CVSS 3.1
9.8
EPSS
87.4%
Threat
7.6
CVE-2015-1641 Apr 14, 20:59 HIGH KEV PATCH THREAT Act Now

Microsoft Word 2007 through 2013 and SharePoint components contain a memory corruption vulnerability in RTF processing that allows remote code execution, heavily exploited by multiple APT groups throughout 2015-2017.

RCE Buffer Overflow Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
7.8
EPSS
93.6%
Threat
7.9
CVE-2015-0318 Feb 06, 00:59 CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 89.2%.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +1
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
89.2%
Threat
6.2
CVE-2015-0235 Jan 28, 19:59 CRITICAL POC PATCH THREAT Act Now

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.7%.

PHP RCE Buffer Overflow Linux Memory Corruption +22
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
86.7%
Threat
6.1
CVE-2014-9163 Dec 10, 21:59 HIGH KEV THREAT Act Now

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available.

RCE Buffer Overflow Microsoft Stack Overflow Adobe
NVD GitHub VulDB
CVSS 3.1
7.8
EPSS
3.6%
CVE-2014-4880 Dec 08, 11:59 HIGH POC THREAT Act Now

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.6%.

RCE Buffer Overflow Hikvision Dvr Ds 7204 Firmware
NVD Exploit-DB
CVSS 2.0
7.5
EPSS
78.6%
Threat
5.4
CVE-2014-8439 Nov 25, 23:59 HIGH KEV THREAT Act Now

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 27.1%.

RCE Buffer Overflow Denial Of Service Microsoft Adobe
NVD VulDB
CVSS 3.1
8.8
EPSS
27.1%
Threat
4.1
CVE-2014-1635 Nov 12, 16:55 CRITICAL POC THREAT Emergency

Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.9%.

RCE Buffer Overflow N750 Wireless Router Firmware N750 Wireless Router Belkin
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
82.9%
Threat
6.0
CVE-2014-8440 Nov 11, 23:55 CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.8%.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
86.8%
Threat
6.1
CVE-2014-6332 Nov 11, 22:55 HIGH POC KEV PATCH THREAT Act Now

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Microsoft
NVD Exploit-DB VulDB
CVSS 3.1
8.8
EPSS
94.1%
Threat
7.6
CVE-2013-7409 Oct 30, 15:55 HIGH POC THREAT Act Now

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.1%.

RCE Buffer Overflow Denial Of Service Allplayer
NVD Exploit-DB
CVSS 2.0
7.5
EPSS
82.1%
Threat
5.5
CVE-2014-4404 Sep 18, 10:55 HIGH POC KEV THREAT Act Now

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Memory Corruption Apple
NVD Exploit-DB VulDB
CVSS 3.1
7.8
EPSS
62.0%
Threat
6.4
CVE-2014-0556 Sep 10, 01:55 CRITICAL POC PATCH THREAT Act Now

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.0%.

RCE Buffer Overflow Google Microsoft Adobe +3
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
86.0%
Threat
6.1
CVE-2013-2597 Aug 31, 10:55 HIGH KEV THREAT Act Now

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available.

Buffer Overflow Linux Google Qualcomm Android Msm +1
NVD VulDB
CVSS 3.1
8.4
EPSS
6.7%
CVE-2014-2364 Jul 19, 05:09 HIGH POC THREAT Act Now

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 40.2%.

RCE Buffer Overflow Stack Overflow Advantech Webaccess Advantech
NVD Exploit-DB
CVSS 2.0
7.5
EPSS
40.2%
Threat
4.2
CVE-2014-3888 Jul 10, 11:06 HIGH POC THREAT Act Now

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 29.0%.

RCE Buffer Overflow Centum Vp Centum Cs 3000 B M9000Cs Software +13
NVD Exploit-DB
CVSS 2.0
8.3
EPSS
29.0%
Threat
4.0
CVE-2014-3913 Jun 04, 14:55 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.7%.

RCE Buffer Overflow Accessnow Server Ericom
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
78.7%
Threat
5.9
CVE-2014-3936 Jun 02, 14:55 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 84.3%.

RCE Buffer Overflow D-Link Dir 505L Shareport Mobile Companion Dir505 Shareport Mobile Companion Firmware +4
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
84.3%
Threat
6.0
CVE-2014-3791 May 20, 14:55 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.2%.

RCE Buffer Overflow Easy File Sharing Web Server Efssoft
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
77.2%
Threat
5.8
CVE-2014-0782 May 16, 11:12 HIGH POC THREAT Act Now

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 39.8%.

RCE Buffer Overflow Stack Overflow Centum Vp Centum Cs 3000 +14
NVD Exploit-DB
CVSS 2.0
8.3
EPSS
39.8%
Threat
4.4
CVE-2013-4730 May 15, 14:55 CRITICAL POC THREAT Emergency

Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 74.5%.

RCE Buffer Overflow Pcman S Ftp Server
NVD Exploit-DB VulDB
CVSS 2.0
10.0
EPSS
74.5%
Threat
5.7
CVE-2014-0196 May 07, 10:55 MEDIUM POC KEV PATCH THREAT Act Now

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Denial Of Service Linux Race Condition Debian +33
NVD Exploit-DB GitHub VulDB
CVSS 3.1
5.5
EPSS
48.6%
Threat
5.6
CVE-2014-0515 Apr 29, 10:37 CRITICAL POC PATCH THREAT Act Now

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 92.6%.

RCE Buffer Overflow Microsoft Adobe Flash Player
NVD Exploit-DB VulDB
CVSS 2.0
10.0
EPSS
92.6%
Threat
6.3
CVE-2014-1776 Apr 27, 10:55 CRITICAL POC KEV PATCH THREAT Act Now

Internet Explorer 6 through 11 contain a use-after-free vulnerability in CMarkup::IsConnectedToPrimaryMarkup that allows remote code execution, exploited as a zero-day in April 2014 with initial attribution to APT groups.

RCE Buffer Overflow Denial Of Service Use After Free Memory Corruption +1
NVD VulDB
CVSS 3.1
9.8
EPSS
80.2%
Threat
9.4
CVE-2014-0160 Apr 07, 22:55 HIGH POC KEV PATCH THREAT Act Now

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Information Disclosure OpenSSL Broadcom Debian +33
NVD Exploit-DB GitHub VulDB
CVSS 3.1
7.5
EPSS
94.5%
Threat
7.3
CVE-2014-1761 Mar 25, 13:24 HIGH POC KEV PATCH THREAT Act Now

Microsoft Word 2003 through 2013 contain a memory corruption vulnerability in RTF file parsing that allows remote code execution, exploited as a zero-day in targeted attacks against government and military organizations.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft
NVD Exploit-DB VulDB
CVSS 3.1
7.8
EPSS
93.1%
Threat
9.4
CVE-2014-0784 Mar 14, 10:55 HIGH POC Act Now

Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Stack Overflow Centum Cs 3000 Yokogawa
NVD Exploit-DB
CVSS 2.0
8.3
EPSS
2.5%
CVE-2014-0783 Mar 14, 10:55 CRITICAL POC Emergency

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Stack Overflow Centum Cs 3000 Yokogawa
NVD Exploit-DB
CVSS 2.0
9.0
EPSS
5.3%
CVE-2014-0307 Mar 12, 05:15 CRITICAL POC THREAT Emergency

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 86.4%.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD Exploit-DB VulDB
CVSS 2.0
9.3
EPSS
86.4%
Threat
6.0
CVE-2013-3928 Mar 11, 19:37 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 76.1%.

RCE Buffer Overflow Chasys Draw Ies
NVD Exploit-DB VulDB
CVSS 2.0
9.3
EPSS
76.1%
Threat
5.6
CVE-2014-2299 Mar 11, 13:01 CRITICAL POC THREAT Emergency

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.9%.

RCE Buffer Overflow Denial Of Service Wireshark
NVD Exploit-DB VulDB
CVSS 2.0
9.3
EPSS
66.9%
Threat
5.4
CVE-2014-2206 Mar 05, 16:37 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 76.6%.

RCE Buffer Overflow Denial Of Service Getgo Download Manager
NVD Exploit-DB VulDB
CVSS 2.0
10.0
EPSS
76.6%
Threat
5.8
CVE-2017-6738
EPSS 14% CVSS 8.8
HIGH KEV THREAT Act Now

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 14.1%.

RCE Buffer Overflow Apple +1
NVD
CVE-2017-6737
EPSS 14% CVSS 8.8
HIGH KEV THREAT Act Now

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 14.1%.

RCE Buffer Overflow Cisco +1
NVD
CVE-2017-6736
EPSS 89% 7.4 CVSS 8.8
HIGH POC KEV THREAT Act Now

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Apple +1
NVD GitHub Exploit-DB
CVE-2017-3631
EPSS 11% CVSS 5.3
MEDIUM POC PATCH THREAT This Month

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated medium severity (CVSS 5.3), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 10.9%.

Buffer Overflow Denial Of Service Oracle +1
NVD Exploit-DB
CVE-2017-3630
EPSS 11% CVSS 5.3
MEDIUM POC PATCH THREAT This Month

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated medium severity (CVSS 5.3), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 10.9%.

Buffer Overflow Denial Of Service Memory Corruption +2
NVD Exploit-DB
CVE-2017-3629
EPSS 29% CVSS 7.8
HIGH POC PATCH THREAT Act Now

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 29.4%.

Buffer Overflow Oracle Solaris
NVD Exploit-DB
CVE-2017-1000364
EPSS 3% CVSS 7.4
HIGH POC Act Now

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Buffer Overflow Linux Linux Kernel
NVD Exploit-DB
CVE-2017-9544
EPSS 80% 5.8 CVSS 9.8
CRITICAL POC THREAT Emergency

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 79.6%.

RCE Buffer Overflow Memory Corruption +2
NVD Exploit-DB
CVE-2017-8540
EPSS 85% 7.1 CVSS 7.8
HIGH POC KEV PATCH THREAT Act Now

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Memory Corruption +1
NVD Exploit-DB
CVE-2017-6862
EPSS 38% 4.6 CVSS 9.8
CRITICAL KEV THREAT Emergency

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 37.5%.

Authentication Bypass RCE Buffer Overflow +1
NVD
CVE-2017-0222
EPSS 62% 5.1 CVSS 8.8
HIGH KEV PATCH THREAT Act Now

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 62.0%.

RCE Buffer Overflow Memory Corruption +1
NVD
CVE-2017-6553
EPSS 74% 5.7 CVSS 9.8
CRITICAL POC PATCH THREAT Act Now

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 74.0%.

Buffer Overflow Privilege Manager For Unix Quest
NVD Exploit-DB
CVE-2017-5030
EPSS 51% 6.3 CVSS 8.8
HIGH POC KEV THREAT Act Now

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Information Disclosure +9
NVD
CVE-2014-3931
EPSS 36% 6.0 CVSS 9.8
CRITICAL POC KEV THREAT Emergency

fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Multi Router Looking Glass
NVD
CVE-2017-7310
EPSS 87% 5.7 CVSS 7.8
HIGH POC THREAT Act Now

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 86.6%.

RCE Buffer Overflow Diskboss +3
NVD Exploit-DB
CVE-2017-7308
EPSS 87% 5.7 CVSS 7.8
HIGH POC THREAT Act Now

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 87.0%.

Buffer Overflow Denial Of Service Linux +1
NVD Exploit-DB
CVE-2017-7269
EPSS 94% 9.8 CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

Remote code execution in Microsoft IIS 6.0 WebDAV service allows unauthenticated attackers to execute arbitrary code by sending a specially crafted PROPFIND request with a malicious 'If' header. Confirmed actively exploited (CISA KEV) since July-August 2016, predating public disclosure by 7+ months. EPSS score of 94.43% (100th percentile) reflects widespread exploitation against legacy Windows Server 2003 R2 systems still exposed to the internet. Multiple public exploits exist including Metasploit modules, and vendor patch has been available since March 2017.

RCE Buffer Overflow Microsoft
NVD GitHub Exploit-DB
CVE-2017-7230
EPSS 66% 5.4 CVSS 9.8
CRITICAL POC THREAT Emergency

A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 65.6%.

RCE Buffer Overflow Disk Sorter +1
NVD Exploit-DB
CVE-2017-0149
EPSS 41% 4.5 CVSS 8.8
HIGH KEV PATCH THREAT Act Now

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 41.5%.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2017-0101
EPSS 67% 6.6 CVSS 7.8
HIGH POC KEV PATCH THREAT Act Now

The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Microsoft
NVD Exploit-DB
CVE-2017-0022
EPSS 44% 5.6 CVSS 6.5
MEDIUM POC KEV PATCH THREAT Act Now

Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Information Disclosure Microsoft
NVD
CVE-2017-6465
EPSS 80% 5.9 CVSS 9.8
CRITICAL POC THREAT Emergency

Remote Code Execution was discovered in FTPShell Client 6.53. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 80.5%.

RCE Buffer Overflow Ftpshell +1
NVD Exploit-DB
CVE-2017-6416
EPSS 65% 5.4 CVSS 9.8
CRITICAL POC THREAT Emergency

An issue was discovered in SysGauge 1.5.18. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 64.6%.

RCE Buffer Overflow Sysgauge +1
NVD Exploit-DB
CVE-2017-6187
EPSS 69% 5.5 CVSS 9.8
CRITICAL POC THREAT Emergency

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 69.4%.

RCE Buffer Overflow Disksavvy +1
NVD Exploit-DB
CVE-2017-3823
EPSS 80% 5.7 CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 80.4%.

RCE Buffer Overflow Chrome +10
NVD
CVE-2016-10174
EPSS 91% 7.7 CVSS 9.8
CRITICAL POC KEV THREAT Emergency

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Netgear
NVD Exploit-DB
CVE-2016-5198
EPSS 78% 7.1 CVSS 8.8
HIGH POC KEV THREAT Act Now

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Information Disclosure +7
NVD
CVE-2016-7201 NuGet
EPSS 90% 7.5 CVSS 8.8
HIGH POC KEV PATCH THREAT Act Now

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +2
NVD GitHub Exploit-DB
CVE-2016-7200 NuGet
EPSS 88% 7.4 CVSS 8.8
HIGH POC KEV PATCH THREAT Act Now

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +2
NVD GitHub Exploit-DB
CVE-2016-7193
EPSS 71% 5.2 CVSS 7.8
HIGH KEV PATCH THREAT Act Now

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 71.2%.

RCE Buffer Overflow Microsoft
NVD
CVE-2016-4657
EPSS 77% 7.1 CVSS 8.8
HIGH POC KEV THREAT Act Now

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB
CVE-2016-4656
EPSS 67% 6.6 CVSS 7.8
HIGH POC KEV THREAT Act Now

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB
CVE-2016-6366
EPSS 91% 7.5 CVSS 8.8
HIGH POC KEV THREAT Act Now

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Cisco
NVD GitHub Exploit-DB
CVE-2016-4998
EPSS 2% CVSS 7.1
HIGH POC PATCH Act Now

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. Public exploit code available.

Buffer Overflow Denial Of Service Linux +4
NVD GitHub
CVE-2016-4997
EPSS 5% CVSS 7.8
HIGH POC PATCH Act Now

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Buffer Overflow Denial Of Service +15
NVD GitHub Exploit-DB
CVE-2016-4523
EPSS 67% 5.0 CVSS 7.5
HIGH KEV THREAT Act Now

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 67.0%.

Buffer Overflow Denial Of Service Information Disclosure +2
NVD VulDB
CVE-2016-0189
EPSS 91% 7.2 CVSS 7.5
HIGH POC KEV PATCH THREAT Act Now

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB VulDB
CVE-2016-1646
EPSS 67% 6.8 CVSS 8.8
HIGH POC KEV PATCH THREAT Act Now

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Denial Of Service Information Disclosure +15
NVD VulDB
CVE-2016-0099
EPSS 90% 9.3 CVSS 7.8
HIGH POC KEV PATCH THREAT Act Now

Windows Secondary Logon Service improperly processes request handles, allowing local users to escalate privileges to SYSTEM on Windows Vista through Windows 10 via a crafted application.

Buffer Overflow Microsoft
NVD Exploit-DB VulDB
CVE-2015-7768
EPSS 75% 5.2 CVSS 7.5
HIGH POC THREAT Act Now

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 74.6%.

RCE Buffer Overflow Ftp Utility +1
NVD Exploit-DB
CVE-2015-7243
EPSS 73% 5.2 CVSS 7.5
HIGH POC THREAT Act Now

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted WAV file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 73.3%.

RCE Buffer Overflow Denial Of Service +1
NVD Exploit-DB
CVE-2015-2546
EPSS 40% 4.3 CVSS 8.2
HIGH KEV PATCH THREAT Act Now

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 39.8%.

Buffer Overflow Microsoft Windows 10 1507 +8
NVD VulDB
CVE-2015-1171
EPSS 77% 5.8 CVSS 10.0
CRITICAL POC THREAT Emergency

Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 76.9%.

RCE Buffer Overflow Sim Card Editor
NVD Exploit-DB
CVE-2015-2502
EPSS 23% 5.4 CVSS 8.8
HIGH POC KEV PATCH THREAT Act Now

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +2
NVD VulDB
CVE-2015-1642
EPSS 73% 5.2 CVSS 7.8
HIGH KEV PATCH THREAT Act Now

Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability.". Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 72.9%.

RCE Buffer Overflow Memory Corruption +1
NVD VulDB
CVE-2015-2426
EPSS 92% 7.5 CVSS 8.8
HIGH POC KEV PATCH THREAT Act Now

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Microsoft +1
NVD Exploit-DB VulDB
CVE-2015-2387
EPSS 31% 6.0 CVSS 7.8
HIGH KEV PATCH THREAT Act Now

The Adobe Type Manager Font Driver (ATMFD.DLL) in Windows contains a memory corruption vulnerability that allows local privilege escalation, exploited by the Duqu 2.0 malware in targeted attacks against diplomatic entities.

Buffer Overflow Memory Corruption Microsoft +1
NVD VulDB
CVE-2015-2425
EPSS 34% 4.3 CVSS 8.8
HIGH KEV PATCH THREAT Act Now

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 34.1%.

RCE Buffer Overflow Denial Of Service +2
NVD VulDB
CVE-2015-2424
EPSS 77% 5.6 CVSS 8.8
HIGH KEV PATCH THREAT Act Now

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 76.5%.

RCE Buffer Overflow Denial Of Service +2
NVD VulDB
CVE-2015-2419
EPSS 69% 6.8 CVSS 8.8
HIGH POC KEV PATCH THREAT Act Now

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB VulDB
CVE-2015-5123
EPSS 48% 4.9 CVSS 9.8
CRITICAL KEV THREAT Emergency

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 47.6%.

RCE Buffer Overflow Denial Of Service +18
NVD GitHub VulDB
CVE-2015-5122
EPSS 93% 7.7 CVSS 9.8
CRITICAL POC KEV THREAT Emergency

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +18
NVD Exploit-DB GitHub VulDB
CVE-2015-5119
EPSS 93% 9.8 CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

Remote code execution in Adobe Flash Player 11.x through 18.x allows unauthenticated network attackers to execute arbitrary code via crafted Flash content exploiting a use-after-free flaw in the ByteArray class. Confirmed actively exploited (CISA KEV) in July 2015 following the Hacking Team data breach, which exposed weaponized exploit code targeting this vulnerability. With EPSS score of 93.21% (100th percentile) and publicly available proof-of-concept, this represents critical risk to unpatched Flash installations across Windows, OS X, and Linux platforms. Vendor-released patches available via Adobe APSB15-16.

RCE Buffer Overflow Denial Of Service +17
NVD GitHub Exploit-DB VulDB
CVE-2015-3113
EPSS 92% 9.7 CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

Adobe Flash Player contains a heap-based buffer overflow that allows remote code execution, exploited as a zero-day in June 2015 by APT3 (a Chinese cyber espionage group) in phishing campaigns targeting aerospace and defense organizations.

RCE Buffer Overflow Memory Corruption +20
NVD GitHub Exploit-DB VulDB
CVE-2015-2797
EPSS 77% 5.8 CVSS 10.0
CRITICAL POC THREAT Emergency

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.0%.

RCE Buffer Overflow Air Firmware +1
NVD Exploit-DB
CVE-2015-3105
EPSS 90% 6.2 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 90.3%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2015-2360
EPSS 12% CVSS 8.8
HIGH KEV PATCH THREAT Act Now

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 11.6%.

Buffer Overflow Denial Of Service Microsoft
NVD VulDB
CVE-2015-3090
EPSS 90% 6.2 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 89.8%.

RCE Buffer Overflow Denial Of Service +6
NVD Exploit-DB
CVE-2015-3043
EPSS 87% 7.6 CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Denial Of Service +16
NVD Exploit-DB GitHub VulDB
CVE-2015-1641
EPSS 94% 7.9 CVSS 7.8
HIGH KEV PATCH THREAT Act Now

Microsoft Word 2007 through 2013 and SharePoint components contain a memory corruption vulnerability in RTF processing that allows remote code execution, heavily exploited by multiple APT groups throughout 2015-2017.

RCE Buffer Overflow Memory Corruption +1
NVD VulDB
CVE-2015-0318
EPSS 89% 6.2 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 89.2%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2015-0235
EPSS 87% 6.1 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.7%.

PHP RCE Buffer Overflow +24
NVD Exploit-DB
CVE-2014-9163
EPSS 4% CVSS 7.8
HIGH KEV THREAT Act Now

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available.

RCE Buffer Overflow Microsoft +2
NVD GitHub VulDB
CVE-2014-4880
EPSS 79% 5.4 CVSS 7.5
HIGH POC THREAT Act Now

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.6%.

RCE Buffer Overflow Hikvision +1
NVD Exploit-DB
CVE-2014-8439
EPSS 27% 4.1 CVSS 8.8
HIGH KEV THREAT Act Now

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 27.1%.

RCE Buffer Overflow Denial Of Service +2
NVD VulDB
CVE-2014-1635
EPSS 83% 6.0 CVSS 10.0
CRITICAL POC THREAT Emergency

Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.9%.

RCE Buffer Overflow N750 Wireless Router Firmware +2
NVD Exploit-DB
CVE-2014-8440
EPSS 87% 6.1 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.8%.

RCE Buffer Overflow Denial Of Service +6
NVD Exploit-DB
CVE-2014-6332
EPSS 94% 7.6 CVSS 8.8
HIGH POC KEV PATCH THREAT Act Now

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Microsoft
NVD Exploit-DB VulDB
CVE-2013-7409
EPSS 82% 5.5 CVSS 7.5
HIGH POC THREAT Act Now

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.1%.

RCE Buffer Overflow Denial Of Service +1
NVD Exploit-DB
CVE-2014-4404
EPSS 62% 6.4 CVSS 7.8
HIGH POC KEV THREAT Act Now

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Buffer Overflow Memory Corruption +1
NVD Exploit-DB VulDB
CVE-2014-0556
EPSS 86% 6.1 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.0%.

RCE Buffer Overflow Google +5
NVD Exploit-DB
CVE-2013-2597
EPSS 7% CVSS 8.4
HIGH KEV THREAT Act Now

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available.

Buffer Overflow Linux Google +3
NVD VulDB
CVE-2014-2364
EPSS 40% 4.2 CVSS 7.5
HIGH POC THREAT Act Now

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 40.2%.

RCE Buffer Overflow Stack Overflow +2
NVD Exploit-DB
CVE-2014-3888
EPSS 29% 4.0 CVSS 8.3
HIGH POC THREAT Act Now

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 29.0%.

RCE Buffer Overflow Centum Vp +15
NVD Exploit-DB
CVE-2014-3913
EPSS 79% 5.9 CVSS 10.0
CRITICAL POC THREAT Emergency

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.7%.

RCE Buffer Overflow Accessnow Server +1
NVD Exploit-DB
CVE-2014-3936
EPSS 84% 6.0 CVSS 10.0
CRITICAL POC THREAT Emergency

Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 84.3%.

RCE Buffer Overflow D-Link +6
NVD Exploit-DB
CVE-2014-3791
EPSS 77% 5.8 CVSS 10.0
CRITICAL POC THREAT Emergency

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.2%.

RCE Buffer Overflow Easy File Sharing Web Server +1
NVD Exploit-DB
CVE-2014-0782
EPSS 40% 4.4 CVSS 8.3
HIGH POC THREAT Act Now

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 39.8%.

RCE Buffer Overflow Stack Overflow +16
NVD Exploit-DB
CVE-2013-4730
EPSS 74% 5.7 CVSS 10.0
CRITICAL POC THREAT Emergency

Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 74.5%.

RCE Buffer Overflow Pcman S Ftp Server
NVD Exploit-DB VulDB
CVE-2014-0196
EPSS 49% 5.6 CVSS 5.5
MEDIUM POC KEV PATCH THREAT Act Now

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Denial Of Service Linux +35
NVD Exploit-DB GitHub VulDB
CVE-2014-0515
EPSS 93% 6.3 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 92.6%.

RCE Buffer Overflow Microsoft +2
NVD Exploit-DB VulDB
CVE-2014-1776
EPSS 80% 9.4 CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

Internet Explorer 6 through 11 contain a use-after-free vulnerability in CMarkup::IsConnectedToPrimaryMarkup that allows remote code execution, exploited as a zero-day in April 2014 with initial attribution to APT groups.

RCE Buffer Overflow Denial Of Service +3
NVD VulDB
CVE-2014-0160
EPSS 94% 7.3 CVSS 7.5
HIGH POC KEV PATCH THREAT Act Now

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Information Disclosure OpenSSL +35
NVD Exploit-DB GitHub VulDB
CVE-2014-1761
EPSS 93% 9.4 CVSS 7.8
HIGH POC KEV PATCH THREAT Act Now

Microsoft Word 2003 through 2013 contain a memory corruption vulnerability in RTF file parsing that allows remote code execution, exploited as a zero-day in targeted attacks against government and military organizations.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB VulDB
CVE-2014-0784
EPSS 2% CVSS 8.3
HIGH POC Act Now

Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD Exploit-DB
CVE-2014-0783
EPSS 5% CVSS 9.0
CRITICAL POC Emergency

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD Exploit-DB
CVE-2014-0307
EPSS 86% 6.0 CVSS 9.3
CRITICAL POC THREAT Emergency

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 86.4%.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB VulDB
CVE-2013-3928
EPSS 76% 5.6 CVSS 9.3
CRITICAL POC THREAT Emergency

Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 76.1%.

RCE Buffer Overflow Chasys Draw Ies
NVD Exploit-DB VulDB
CVE-2014-2299
EPSS 67% 5.4 CVSS 9.3
CRITICAL POC THREAT Emergency

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.9%.

RCE Buffer Overflow Denial Of Service +1
NVD Exploit-DB VulDB
CVE-2014-2206
EPSS 77% 5.8 CVSS 10.0
CRITICAL POC THREAT Emergency

Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 76.6%.

RCE Buffer Overflow Denial Of Service +1
NVD Exploit-DB VulDB
Prev Page 53 of 435 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy