Sync

4 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-0915 HIGH This Week

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Microsoft Sync

NVD

CVSS 3.1

7.0

EPSS

0.2%

CVE-2018-7886 HIGH POC This Week

An issue was discovered in CloudMe 1.11.0. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Sync

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

2.1%

CVE-2018-6892 CRITICAL POC THREAT Emergency

An issue was discovered in CloudMe before 1.11.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Sync

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

93.6%

CVE-2015-2846 CRITICAL Act Now

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Command Injection Sync

NVD

CVSS 2.0

9.3

EPSS

1.7%

CVE-2022-0915

EPSS 0% CVSS 7.0

HIGH This Week

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Microsoft Sync

NVD

CVE-2018-7886

EPSS 2% CVSS 7.8

HIGH POC This Week

An issue was discovered in CloudMe 1.11.0. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Sync

NVD Exploit-DB

CVE-2018-6892

EPSS 94% CVSS 9.8

CRITICAL POC THREAT Emergency

RCE Buffer Overflow Sync

NVD Exploit-DB

CVE-2015-2846

EPSS 2% CVSS 9.3

CRITICAL Act Now

Command Injection Sync

NVD