Ubi

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-4177 Aug 07, 20:55 CRITICAL POC THREAT Emergency

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 80.2%.

Command Injection Uplay Pc Ubi

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

80.2%

Threat

5.9

CVE-2014-5453 Aug 25, 16:55 HIGH POC This Week

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Uplay Pc Ubi

NVD Exploit-DB

CVSS 2.0

7.2

EPSS

1.1%

CVE-2014-4334 Jun 19, 14:55 HIGH POC THREAT Act Now

Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary code via a long string in the "second connection" to TCP port 1001. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 16.4%.

RCE Buffer Overflow Rayman Legends Ubi

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

16.4%

CVE-2012-4177

EPSS 80% 5.9 CVSS 10.0

CRITICAL POC THREAT Emergency

Command Injection Uplay Pc Ubi

NVD Exploit-DB

CVE-2014-5453

EPSS 1% CVSS 7.2

HIGH POC This Week

Privilege Escalation Uplay Pc Ubi

NVD Exploit-DB

CVE-2014-4334

EPSS 16% CVSS 7.5

HIGH POC THREAT Act Now

RCE Buffer Overflow Rayman Legends +1

NVD Exploit-DB