CVE-2012-0505

OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.

CVSS 2.0 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jre Enterprise Linux Network Satellite and 3 more

CVE-2012-0506

OpenJDK: mutable repository identifiers (CORBA, 7110704)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to CORBA.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jre Enterprise Linux Network Satellite and 3 more

CVE-2010-2216

flash-plugin: multiple security flaws (APSB10-16)

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2214.

CVSS 2.0 · 9.3 Critical EPSS 4.6% KEV · Not listed

Vendors

Adobe Redhat

Products

Adobe Air Flash Player Flash Player For Linux and 1 more

CVE-2012-0547

OpenJDK: AWT hardening fixes (AWT, 7163201)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "toolkit internals references."

CVSS 2.0 · 0.0 Low EPSS 12.5% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jdk Jre Enterprise Linux and 4 more

CVE-2012-0551

JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.

CVSS 2.0 · 5.8 Medium EPSS 11.4% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Glassfish Server Jdk Jre and 4 more

CVE-2012-0752

flash-plugin: multiple code execution flaws (APSB12-03)

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an unspecified "type confusion."

CVSS 2.0 · 9.3 Critical EPSS 8.8% KEV · Not listed

Vendors

Adobe Apple Google and 4 more

Products

Flash Player Mac Os X Android and 4 more

CVE-2012-0753

flash-plugin: multiple code execution flaws (APSB12-03)

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted MP4 data.

CVSS 2.0 · 9.3 Critical EPSS 4.2% KEV · Not listed

Vendors

Adobe Apple Google and 4 more

Products

Flash Player Mac Os X Android and 4 more

CVE-2010-2215

flash-plugin: multiple security flaws (APSB10-16)

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue.

CVSS 2.0 · 4.3 Medium EPSS 3.8% KEV · Not listed

Vendors

Adobe Redhat

Products

Adobe Air Flash Player Flash Player For Linux and 1 more

CVE-2012-0755

flash-plugin: multiple code execution flaws (APSB12-03)

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0756.

CVSS 2.0 · 9.3 Critical EPSS 4.5% KEV · Not listed

Vendors

Adobe Apple Google and 4 more

Products

Flash Player Mac Os X Android and 4 more

CVE-2012-0756

flash-plugin: multiple code execution flaws (APSB12-03)

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0755.

CVSS 2.0 · 9.3 Critical EPSS 14.1% KEV · Not listed

Vendors

Adobe Apple Google and 4 more

Products

Flash Player Mac Os X Android and 4 more

CVE-2010-2214

flash-plugin: multiple security flaws (APSB10-16)

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2216.

CVSS 2.0 · 9.3 Critical EPSS 4.6% KEV · Not listed

Vendors

Adobe Redhat

Products

Adobe Air Flash Player Flash Player For Linux and 1 more

CVE-2012-0768

flash-plugin: code execution flaw (APSB12-05)

The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.3% KEV · Not listed

Vendors

Adobe Apple Google and 4 more

Products

Flash Player Flash Player For Android Mac Os X and 5 more

CVE-2012-0769

flash-plugin: information disclosure flaw (APSB12-05)

Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not properly handle integers, which allows attackers to obtain sensitive information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 4.5% KEV · Not listed

Vendors

Adobe Apple Google and 4 more

Products

Flash Player Flash Player For Android Mac Os X and 5 more

CVE-2012-0773

flash-plugin: arbitrary code execution via memory corruption flaw in NetStream class (APSB12-07)

The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 5.4% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Adobe Air Flash Player Mac Os X and 6 more

CVE-2012-0774

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueType font.

CVSS 2.0 · 10.0 Critical EPSS 15.5% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2012-0775

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 9.0% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2012-0777

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 7.1% KEV · Not listed

Vendors

Adobe Apple Linux and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2012-0779

flash-plugin: arbitrary code execution via object confusion (APSB12-09)

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.

CVSS 2.0 · 9.3 Critical EPSS 87.1% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Mac Os X Android and 3 more

CVE-2012-1530

acroread: multiple code execution flaws (APSB13-02)

Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set.

CVSS 2.0 · 10.0 Critical EPSS 8.6% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Rhel Extras

CVE-2012-1531

JDK: unspecified vulnerability (2D)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Javafx Jdk Jre and 4 more