Skip to content

Vendor

generic vulnerabilities

31 published CVES affecting generic, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
31
Critical
2
High
13
Medium
16
Low
0
Unscored
0
CISA KEV
0
Atom feed of generic alerts

Products

Latest generic CVEs

Newest publication first · page 1 of 2

  1. MediumCVSS 6.8 EPSS 0.15%

    Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0...

  2. MediumCVSS 6.8 EPSS 0.15%

    Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0...

  3. HighCVSS 8.8 EPSS 0.25%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.3,...

  4. MediumCVSS 6.9 EPSS 0.21%

    Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1., from 6.0....

  5. HighCVSS 7.0 EPSS 0.24%

    Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serialization External Entities Blowu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.