Vulnerabilities (CVE)
Yack CVE helps teams search and track vulnerabilities.
TOTAL
388,134 CVE
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 function during AVC444 chroma plane reconstruction. A malicious RDP server can craft a RFX_AVC444_BITMAP_STREAM with...Show more |
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message. |
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off s...Show more |
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can int...Show more |
UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An att...Show more |
A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement. |
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. |
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network. |
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network. |
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network. |
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. |
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. |
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. |
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network. |
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |