Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6,068

Export CSV
CVE-2011-2424

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."

CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2425

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.

CVSS 2.0 · 10.0 Critical EPSS 7.7% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2426

flash-plugin: critical flaws fixed in APSB11-26

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 8.2% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-2427

flash-plugin: critical flaws fixed in APSB11-26

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 6.4% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-2428

flash-plugin: critical flaws fixed in APSB11-26

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service (browser crash) via unspecified vectors, related to a "logic error issue."

CVSS 2.0 · 9.3 Critical EPSS 5.3% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-2429

flash-plugin: security control bypass information disclosure fixed in APSB11-26

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, related to a "security control bypass."

CVSS 2.0 · 5.0 Medium EPSS 4.1% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-2430

flash-plugin: critical flaws fixed in APSB11-26

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 6.3% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-2444

flash-plugin: Cross-site scripting vulnerability fixed in APSB11-26

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to a "universal cross-site scripting issue," as exploited in the wild in September 2011.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Flash Player Mac Os X Android and 4 more
CVE-2011-2445

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

CVSS 2.0 · 10.0 Critical EPSS 5.9% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2450

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2451

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2452

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2453

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2454

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2455

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2456

flash-plugin: mulitple code execution flaws (APSB11-28)

Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 9.0% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2457

flash-plugin: mulitple code execution flaws (APSB11-28)

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 9.0% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2459

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2460.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2460

flash-plugin: mulitple code execution flaws (APSB11-28)

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2479

kernel: thp: madvise on top of /dev/zero private mapping can lead to panic

The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero, which allows local users to cause a denial of service (system crash) via a crafted application.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux