Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-02-08 CVE-2013-3553 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nitropdf Nitro PRO and Nitro Reader
Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.
local
low complexity
nitropdf CWE-119
7.8
2018-02-08 CVE-2013-3552 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nitropdf Nitro PRO and Nitro Reader
Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.
local
low complexity
nitropdf CWE-119
7.8
2018-02-08 CVE-2013-2830 Use After Free vulnerability in Sumatrapdfreader Sumatrapdf
Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
local
low complexity
sumatrapdfreader CWE-416
7.8
2018-02-08 CVE-2012-5360 Improper Input Validation vulnerability in Ffmpeg
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.
network
low complexity
ffmpeg CWE-20
8.8
2018-02-08 CVE-2012-5359 Improper Input Validation vulnerability in Ffmpeg
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.
network
low complexity
ffmpeg CWE-20
8.8
2018-02-08 CVE-2018-1162 Unspecified vulnerability in Quest Netvault Backup 11.2.0.13
This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2.0.13.
network
low complexity
quest
8.1
2018-02-08 CVE-2017-7351 SQL Injection vulnerability in Vanderbilt Redcap 7.0.0
A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload.
network
low complexity
vanderbilt CWE-89
8.8
2018-02-08 CVE-2018-0517 Untrusted Search Path vulnerability in Kddi Anshin NET Security
Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
kddi CWE-426
7.8
2018-02-08 CVE-2018-0137 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Prime Network 4.3(0.0)Pp6/4.3(2.0)Pp1
A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-770
8.6
2018-02-08 CVE-2018-0132 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Carrier Routing System 5.3.0.Rout
A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-119
8.6