Skip to main content

Sync

5 CVEs product

Monthly

CVE-2018-6892 Feb 11, 18:29 CRITICAL POC THREAT Emergency

An issue was discovered in CloudMe before 1.11.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Sync
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
93.6%
CVE-2023-26559 Apr 14, 13:15 MEDIUM This Month

A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion before 5.0.3 build 2023022015 allows an attacker to read files from a WEB-INF. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Sync Oxygen Content Fusion Oxygen Xml Web Author
NVD
CVSS 3.1
5.3
EPSS
1.0%
CVE-2022-0915 Apr 12, 19:15 HIGH This Week

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Microsoft Sync Logitech
NVD
CVSS 3.1
7.0
EPSS
0.2%
CVE-2018-7886 Mar 15, 02:29 HIGH POC This Week

An issue was discovered in CloudMe 1.11.0. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Sync
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
2.1%
CVE-2015-2846 Apr 13, 14:59 CRITICAL Act Now

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Command Injection Bittorrent Sync
NVD
CVSS 2.0
9.3
EPSS
1.7%
EPSS 94% CVSS 9.8
CRITICAL POC THREAT Emergency

An issue was discovered in CloudMe before 1.11.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Sync
NVD Exploit-DB
EPSS 1% CVSS 5.3
MEDIUM This Month

A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion before 5.0.3 build 2023022015 allows an attacker to read files from a WEB-INF. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Sync Oxygen Content Fusion +1
NVD
EPSS 0% CVSS 7.0
HIGH This Week

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Microsoft Sync +1
NVD
EPSS 2% CVSS 7.8
HIGH POC This Week

An issue was discovered in CloudMe 1.11.0. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Sync
NVD Exploit-DB
EPSS 2% CVSS 9.3
CRITICAL Act Now

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Command Injection Bittorrent Sync
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy