Export limit exceeded: 425868 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,046

Export CSV
CVE-2010-2179

flash-plugin: multiple security flaws (APSB10-14)

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.

CVSS 2.0 · 4.3 Medium EPSS 5.9% KEV · Not listed
Vendors
Adobe Google Mozilla and 1 more
Products
Air Flash Player Chrome and 2 more
CVE-2010-0087

JDK unspecified vulnerability in JWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Rhel Extras Sap and 3 more
CVE-2010-0887

Java: Java Web Start arbitrary command line injection

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 9.4% KEV · Not listed
Vendors
Redhat Sun
Products
Rhel Extras Java
CVE-2010-0192

Acroread: Multiple code execution flaws (APSB10-09)

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0193 and CVE-2010-0196.

CVSS 2.0 · 9.3 Critical EPSS 9.6% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Acrobat Reader Mac Os X and 2 more
CVE-2010-0886

Java: Java Web Start arbitrary command line injection

Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 69.9% KEV · Not listed
Vendors
Microsoft Redhat Sun
Products
Windows Rhel Extras Jdk and 1 more
CVE-2010-2160

flash-plugin: multiple security flaws (APSB10-14)

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, related to getouterscope, a different vulnerability than CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.

CVSS 2.0 · 9.3 Critical EPSS 6.8% KEV · Not listed
Vendors
Adobe Macromedia Redhat
Products
Air Flash Player Flash Player and 1 more
CVE-2010-0849

JDK unspecified vulnerability in Java2D component

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.

CVSS 2.0 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Rhel Extras Sap and 3 more
CVE-2010-0848

OpenJDK AWT Library Invalid Index Vulnerability (6914823)

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 4 more
CVE-2010-0847

OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.

CVSS 2.0 · 7.5 High EPSS 5.5% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 4 more
CVE-2010-0090

JDK unspecified vulnerability in JavaWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors.

CVSS 2.0 · 5.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Jdk and 1 more
CVE-2010-0846

JDK unspecified vulnerability in ImageIO component

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image encoder (JPEGImageEncoderImpl).

CVSS 2.0 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Rhel Extras Sap and 3 more
CVE-2010-2178

flash-plugin: multiple security flaws (APSB10-14)

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed
Vendors
Adobe Macromedia Redhat
Products
Air Flash Player Flash Player and 1 more
CVE-2010-0845

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 5.1 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Rhel Extras Jdk and 1 more
CVE-2010-0844

JDK multiple unspecified vulnerabilities

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.

CVSS 2.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Rhel Extras Sap and 3 more
CVE-2010-0843

JDK multiple unspecified vulnerabilities

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute arbitrary code.

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Rhel Extras Sap and 3 more
CVE-2010-0842

JDK multiple unspecified vulnerabilities

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.

CVSS 2.0 · 7.5 High EPSS 77.7% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Rhel Extras Sap and 3 more
CVE-2010-2170

flash-plugin: multiple security flaws (APSB10-14)

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.

CVSS 2.0 · 9.3 Critical EPSS 7.4% KEV · Not listed
Vendors
Adobe Macromedia Redhat
Products
Air Flash Player Flash Player and 1 more
CVE-2010-0085

OpenJDK File TOCTOU deserialization vulnerability (6736390)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0088.

CVSS 2.0 · 5.1 Medium EPSS 3.1% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 4 more
CVE-2010-2177

flash-plugin: multiple security flaws (APSB10-14)

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed
Vendors
Adobe Macromedia Redhat
Products
Air Flash Player Flash Player and 1 more
CVE-2010-2169

flash-plugin: multiple security flaws (APSB10-14)

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackers to cause a denial of service (pointer memory corruption) or possibly execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed
Vendors
Adobe Macromedia Redhat
Products
Air Flash Player Flash Player and 1 more