Vulnerabilities (CVE)

Filtered by CWE-123
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-5435 1 Honeywell 1 Experion Process Knowledge System 2019-10-09 7.5 HIGH 9.8 CRITICAL
An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
CVE-2018-12036 1 Owasp 1 Dependency-check 2018-07-27 6.8 MEDIUM 7.8 HIGH
OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.
CVE-2017-6282 2 Google, Nvidia 3 Android, Shield Tv, Shield Tv Firmware 2018-03-27 7.2 HIGH 7.8 HIGH
NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high.
CVE-2015-8271 1 Rtmpdump Project 1 Rtmpdump 2017-11-04 7.5 HIGH 9.8 CRITICAL
The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
CVE-2017-10994 1 Foxitsoftware 2 Foxit Reader, Phantompdf 2017-08-24 9.3 HIGH 7.3 HIGH
Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document.