CVE-2014-0424

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0418.

CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Network Satellite and 2 more

CVE-2014-0428

OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.

CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2010-0203

Acroread: Multiple code execution flaws (APSB10-09)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0202.

CVSS 2.0 · 9.3 Critical EPSS 8.1% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2010-0202

Acroread: Multiple code execution flaws (APSB10-09)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0203.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2010-0093

OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095.

CVSS 2.0 · 5.1 Medium EPSS 3.1% KEV · Not listed

Vendors

Redhat Sun

Products

Enterprise Linux Rhel Extras Jdk and 2 more

CVE-2010-2174

flash-plugin: multiple security flaws (APSB10-14)

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.

CVSS 2.0 · 9.3 Critical EPSS 7.4% KEV · Not listed

Vendors

Adobe Macromedia Redhat

Products

Air Flash Player Flash Player and 1 more

CVE-2010-2172

flash-plugin: "possible player crash" affects also v9.x versions of Adobe Flash Player

Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attackers to cause a denial of service via unknown vectors.

CVSS 2.0 · 4.3 Medium EPSS 5.0% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2010-0089

JDK unspecified vulnerability in JavaWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Rhel Extras Sap and 3 more

CVE-2010-0201

Acroread: Multiple code execution flaws (APSB10-09)

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0204.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2010-2161

flash-plugin: multiple security flaws (APSB10-14)

Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."

CVSS 2.0 · 9.3 Critical EPSS 7.1% KEV · Not listed

Vendors

Adobe Macromedia Redhat

Products

Air Flash Player Flash Player and 1 more

CVE-2010-0092

OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 5.1 Medium EPSS 2.9% KEV · Not listed

Vendors

Redhat Sun

Products

Enterprise Linux Network Satellite Rhel Extras and 2 more

CVE-2010-0191

Acroread: Multiple code execution flaws (APSB10-09)

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 5.6% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2010-1321

krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.

CVSS 2.0 · 6.8 Medium EPSS 6.9% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 5 more

Products

Ubuntu Linux Debian Linux Fedora and 7 more

CVE-2010-0194

Acroread: Multiple code execution flaws (APSB10-09)

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0197, CVE-2010-0201, and CVE-2010-0204.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2010-0190

Acroread: Multiple code execution flaws (APSB10-09)

Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2010-2182

flash-plugin: multiple security flaws (APSB10-14)

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed

Vendors

Adobe Macromedia Redhat

Products

Air Flash Player Flash Player and 1 more

CVE-2010-0187

flash-plugin: possible player crash (APSB10-06)

Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.

CVSS 2.0 · 4.3 Medium EPSS 15.6% KEV · Not listed

Vendors

Adobe Redhat

Products

Adobe Air Flash Player Rhel Extras

CVE-2010-0186

flash-plugin: unauthorized cross-domain requests (APSB10-06)

Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed

Vendors

Adobe Redhat

Products

Acrobat Acrobat Reader Adobe Air and 2 more

CVE-2014-0491

flash-plugin: security protection bypass (APSB14-02)

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 7.1% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Flash Player and 4 more

CVE-2014-0492

flash-plugin: memory address layout randomization defeat (APSB14-02)

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."

CVSS 2.0 · 10.0 Critical EPSS 5.7% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Flash Player and 4 more