Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,046

Export CSV
CVE-2014-0533

flash-plugin: multiple cross-site scripting flaws (APSB14-16)

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.

CVSS 2.0 · 4.3 Medium EPSS 3.7% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Adobe Air Sdk Flash Player and 4 more
CVE-2016-3443

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

CVSS 3.0 · 9.6 Critical EPSS 5.5% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Network Satellite and 2 more
CVE-2014-0532

flash-plugin: multiple cross-site scripting flaws (APSB14-16)

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.

CVSS 2.0 · 4.3 Medium EPSS 3.8% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Adobe Air Sdk Flash Player and 4 more
CVE-2014-0531

flash-plugin: multiple cross-site scripting flaws (APSB14-16)

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.

CVSS 2.0 · 4.3 Medium EPSS 3.7% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Adobe Air Sdk Flash Player and 4 more
CVE-2014-0520

flash-plugin: security protection bypass (APSB14-14)

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.

CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Flash Player Mac Os X and 3 more
CVE-2016-1619

chromium-browser: out-of-bounds read in PDFium

Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.

CVSS 3.0 · 7.6 High EPSS 1.1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2014-0519

flash-plugin: security protection bypass (APSB14-14)

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.

CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Flash Player Mac Os X and 3 more
CVE-2016-3449

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.

CVSS 3.0 · 8.3 High EPSS 4.0% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Network Satellite and 2 more
CVE-2016-3508

OpenJDK: missing entity replacement limits (JAXP, 8149962)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

CVSS 3.0 · 5.3 Medium EPSS 4.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Jrockit and 3 more
CVE-2016-1624

chromium-browser: buffer overflow in Brotli

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 1 more
CVE-2014-0518

flash-plugin: security protection bypass (APSB14-14)

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.

CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Flash Player Mac Os X and 3 more
CVE-2014-0517

flash-plugin: security protection bypass (APSB14-14)

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.

CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Flash Player Mac Os X and 3 more
CVE-2016-3156

kernel: ipv4: denial of service when destroying a network interface

The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell and 1 more
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 9 more
CVE-2016-1628

chromium-browser: out-of-bounds read in PDFium

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted JPEG 2000 image in a PDF document, related to the opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl functions.

CVSS 3.0 · 6.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Google Redhat
Products
Debian Linux Chrome Rhel Extras
CVE-2014-0516

flash-plugin: same origin policy bypass (APSB14-14)

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Flash Player Mac Os X and 3 more
CVE-2014-0515

flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13)

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.

CVSS 2.0 · 10.0 Critical EPSS 94.5% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Flash Player Mac Os X Linux Kernel and 2 more
CVE-2016-3422

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.

CVSS 3.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Network Satellite and 2 more
CVE-2014-0510

flash-plugin: use-after-free flaw leads to arbitrary code execution

Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.

CVSS 2.0 · 10.0 Critical EPSS 8.5% KEV · Not listed
Vendors
Adobe Redhat
Products
Flash Player Rhel Extras
CVE-2014-0509

flash-plugin: cross-site scripting flaw (APSB14-09)

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Adobe Air Sdk Flash Player and 4 more
CVE-2014-0508

flash-plugin: information disclosure flaw (APSB14-09)

Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 4.7% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
Adobe Air Adobe Air Sdk Flash Player and 4 more