Export limit exceeded: 425897 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,046

Export CSV
CVE-2011-0599

acroread: critical APSB11-03

The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to 4/8-bit RLE compression, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0602.

CVSS 2.0 · 9.3 Critical EPSS 9.3% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Acrobat Reader Mac Os X and 2 more
CVE-2011-0600

acroread: critical APSB11-03

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, and CVE-2011-0595.

CVSS 2.0 · 9.3 Critical EPSS 40.1% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Acrobat Reader Mac Os X and 2 more
CVE-2011-0603

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0566 and CVE-2011-0567.

CVSS 2.0 · 9.3 Critical EPSS 8.9% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Acrobat Reader Mac Os X and 2 more
CVE-2011-0604

acroread: multiple XSS flaws (APSB11-03)

Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-0587.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Acrobat Reader Mac Os X and 2 more
CVE-2011-0606

acroread: critical APSB11-03

Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a crafted length value, a different vulnerability than CVE-2011-0563 and CVE-2011-0589.

CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Acrobat Reader Mac Os X and 2 more
CVE-2011-0607

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed
Vendors
Adobe Redhat
Products
Flash Player Rhel Extras
CVE-2011-0608

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0607.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed
Vendors
Adobe Redhat
Products
Flash Player Rhel Extras
CVE-2010-3541

OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.

CVSS 2.0 · 5.1 Medium EPSS 3.1% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 4 more
CVE-2010-2890

acroread: multiple code execution flaws (APSB10-21)

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-3619, CVE-2010-3621, CVE-2010-3622, CVE-2010-3628, CVE-2010-3632, and CVE-2010-3658.

CVSS 2.0 · 9.3 Critical EPSS 6.5% KEV · Not listed
Vendors
Adobe Redhat
Products
Acrobat Acrobat Reader Rhel Extras
CVE-2011-0618

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0619

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0620, CVE-2011-0621, and CVE-2011-0622.

CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0620

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and CVE-2011-0622.

CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0621

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0620, and CVE-2011-0622.

CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0622

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0620, and CVE-2011-0621.

CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0623

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0624, CVE-2011-0625, and CVE-2011-0626.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0624

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0625, and CVE-2011-0626.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0625

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0626.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-0626

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0625.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2010-2889

acroread: multiple code execution flaws (APSB10-21)

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626.

CVSS 2.0 · 9.3 Critical EPSS 27.2% KEV · Not listed
Vendors
Adobe Redhat
Products
Acrobat Acrobat Reader Rhel Extras
CVE-2011-0628

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.

CVSS 2.0 · 9.3 Critical EPSS 6.3% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more