Vulnerabilities
Summary — last 7 days
New vulnerabilities5,222▲ 2,437 vs. last week
Critical / high2,945▲ 1,602 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)223▲ 49 vs. last week
32 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.8) | 1.4% | — | Hmtalk DaofficeHmtalk Dava+Hmtalk Daview Indy | 6/30/2020 | 6/17/2026 | A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF… | |
| Modified | High (7.8) | 1.3% | — | Datools Daviewindy | 4/25/2019 | 6/17/2026 | DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | |
| Modified | High (7.8) | 1.3% | — | Datools Daviewindy | 4/25/2019 | 6/17/2026 | DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PhotoShop file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | |
| Modified | High (7.8) | 1.3% | — | Hmtalk Daviewindy | 4/25/2019 | 6/17/2026 | DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | |
| Modified | High (7.8) | 1.2% | — | Datools Daviewindy | 4/25/2019 | 6/17/2026 | DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | |
| Modified | High (7.8) | 1.3% | — | Datools Daviewindy | 4/25/2019 | 6/17/2026 | DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | |
| Modified | Medium (6.9) | 0.40% | — | Amiga Aview | 11/5/2008 | 6/16/2026 | asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file. |