Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2013-0641

acroread: Multiple unspecified vulnerabilities allow remote attackers to execute arbitrary code (APSB13-07)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

CVSS 3.1 · 7.8 High EPSS 32.3% KEV · Listed
Vendors
Adobe Apple Linux and 4 more
Products
Acrobat Acrobat Reader Mac Os X and 10 more
CVE-2013-0643

flash-plugin: Firefox sandbox permissions issue (APSB13-08)

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

CVSS 3.1 · 8.8 High EPSS 10.5% KEV · Listed
Vendors
Adobe Apple Linux and 4 more
Products
Flash Player Mac Os X Linux Kernel and 9 more
CVE-2013-0648

flash-plugin: multiple code execution flaws (APSB13-08)

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

CVSS 3.1 · 8.8 High EPSS 11.1% KEV · Listed
Vendors
Adobe Apple Linux and 4 more
Products
Flash Player Mac Os X Linux Kernel and 9 more
CVE-2012-1723

OpenJDK: insufficient field accessibility checks (HotSpot, 7152811)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 3.1 · 9.8 Critical EPSS 93.6% KEV · Listed
Vendors
Oracle Redhat
Products
Jdk Jre Enterprise Linux and 7 more
CVE-2012-1823

php: command line arguments injection when run in CGI mode (VU#520827)

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS 3.1 · 9.8 Critical EPSS 100.0% KEV · Listed
Vendors
Apple Debian Fedoraproject and 5 more
Products
Mac Os X Debian Linux Fedora and 17 more
CVE-2012-2034

flash-plugin: multiple code execution flaws (APSB12-14)

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.

CVSS 3.1 · 7.5 High EPSS 7.7% KEV · Listed
Vendors
Adobe Apple Google and 5 more
Products
Air Flash Player Macos and 11 more
CVE-2014-0160

openssl: information disclosure in handling of TLS heartbeat extension packets

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

CVSS 3.1 · 7.5 High EPSS 100.0% KEV · Listed
Vendors
Broadcom Canonical Debian and 10 more
Products
Symantec Messaging Gateway Ubuntu Linux Debian Linux and 34 more
CVE-2012-4681

OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

CVSS 3.1 · 9.8 Critical EPSS 98.5% KEV · Listed
Vendors
Oracle Redhat
Products
Jdk Jre Enterprise Linux and 5 more
CVE-2015-2590

OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

CVSS 3.1 · 9.8 Critical EPSS 25.5% KEV · Listed
Vendors
Canonical Debian Opensuse and 3 more
Products
Ubuntu Linux Debian Linux Opensuse and 22 more
CVE-2017-8291

ghostscript: corruption of operand stack

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.

CVSS 3.1 · 7.8 High EPSS 97.0% KEV · Listed
Vendors
Artifex Debian Redhat
Products
Ghostscript Debian Linux Enterprise Linux and 6 more
CVE-2016-5198

chromium-browser: out of bounds memory access in v8

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 34.2% KEV · Listed
Vendors
Apple Google Linux and 2 more
Products
Macos Android Chrome and 6 more
CVE-2017-5030

chromium-browser: memory corruption in v8

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 40.6% KEV · Listed
Vendors
Apple Debian Google and 3 more
Products
Macos Debian Linux Android and 7 more
CVE-2017-5070

chromium-browser: type confusion in v8

Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 32.1% KEV · Listed
Vendors
Apple Google Linux and 2 more
Products
Macos Android Chrome and 6 more
CVE-2016-1646

chromium-browser: out-of-bounds read in V8

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.1 · 8.8 High EPSS 48.1% KEV · Listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 8 more
CVE-2017-12615

tomcat: Remote Code Execution via JSP Upload

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

CVSS 3.1 · 8.1 High EPSS 99.7% KEV · Listed
Vendors
Apache Microsoft Netapp and 1 more
Products
Tomcat Windows 7-mode Transition Tool and 21 more
CVE-2005-0403

security flaw

init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop
CVE-2004-0949

security flaw

The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.

CVSS 2.0 · 6.4 Medium EPSS 2.6% KEV · Not listed
Vendors
Linux Redhat Suse and 2 more
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 5 more