CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Realtek Jungle SDK Remote Code Execution and Command Injection Vulnerability (CVE-2021-35395) Technical Advisory
[Affected Scope] IoT and network devices utilizing Realtek Jungle SDK versions v2.x through v3.4.14B
[Impact] Unauthenticated remote attackers can exploit stack buffer overflows and command injection flaws to execute arbitrary code with root privileges, leading to full device compromise
[Mitigation] Apply the latest firmware updates from the respective device manufacturers and restrict external access to the web management interface
Microsoft Office RTF Stack Buffer Overflow Remote Code Execution Vulnerability (CVE-2010-3333)
[Affected Scope] Microsoft Office XP SP3, 2003 SP3, 2007 SP2, 2010, and Office for Mac 2004, 2008, 2011
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a crafted RTF file
[Mitigation] Apply the official Microsoft MS10-087 security patch, or configure File Block settings via Registry to restrict RTF file parsing