| CVE-2002-0367 Known exploited | High 7.8 | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges… Assigned by mitre | Apr 2, 2003 |
| CVE-2004-0210 Known exploited | High 7.8 | The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer over… Assigned by mitre | Jul 14, 2004 |
| CVE-2004-1464 Known exploited | Medium 5.9 | Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port. Assigned by mitre | Feb 13, 2005 |
| CVE-2005-2773 Known exploited | Critical 9.8 | HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3… Assigned by mitre | Sep 2, 2005 |
| CVE-2006-1547 Known exploited | High 7.5 | ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name… Assigned by redhat | Mar 30, 2006 |
| CVE-2006-2492 Known exploited | High 8.8 | Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a m… Assigned by certcc | May 20, 2006 |
| CVE-2007-0671 Known exploited | High 8.8 | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack v… Assigned by microsoft | Feb 3, 2007 |
| CVE-2007-3010 Known exploited | Critical 9.8 | masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the use… Assigned by mitre | Sep 18, 2007 |
| CVE-2008-0655 Known exploited | High 8.8 | Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. Assigned by mitre | Feb 7, 2008 |
| CVE-2007-5659 Known exploited | High 7.8 | Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. Assigned by mitre | Feb 12, 2008 |
| CVE-2008-3431 Known exploited | High 8.8 | The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with t… Assigned by mitre | Aug 5, 2008 |
| CVE-2008-4128 Known exploited | High 8.1 | Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary com… Assigned by mitre | Sep 18, 2008 |
| CVE-2008-4250 Known exploited | Critical 9.8 | The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a craf… Assigned by microsoft | Oct 23, 2008 |
| CVE-2008-2992 Known exploited | High 7.8 | Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafte… Assigned by mitre | Nov 4, 2008 |
| CVE-2009-0238 Known exploited | High 8.8 | Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in… Assigned by microsoft | Feb 25, 2009 |
| CVE-2009-0927 Known exploited | High 8.8 | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon… Assigned by mitre | Mar 19, 2009 |
| CVE-2009-1151 Known exploited | Critical 9.8 | Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the sav… Assigned by mitre | Mar 26, 2009 |
| CVE-2009-0556 Known exploited | High 8.8 | Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineT… Assigned by microsoft | Apr 3, 2009 |
| CVE-2009-1537 Known exploited | High 8.8 | Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 S… Assigned by microsoft | May 29, 2009 |
| CVE-2009-0563 Known exploited | High 7.8 | Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Vi… Assigned by microsoft | Jun 10, 2009 |
| CVE-2009-1123 Known exploited | High 7.8 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows… Assigned by microsoft | Jun 10, 2009 |
| CVE-2009-0557 Known exploited | High 7.8 | Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Micros… Assigned by microsoft | Jun 10, 2009 |
| CVE-2008-0015 Known exploited | High 8.8 | Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microso… Assigned by mitre | Jul 7, 2009 |
| CVE-2009-1862 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or… Assigned by mitre | Jul 23, 2009 |
| CVE-2009-2055 Known exploited | Medium 5.9 | Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009. Assigned by cisco | Aug 19, 2009 |
| CVE-2009-3459 Known exploited | High 8.8 | Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers me… Assigned by adobe | Oct 13, 2009 |
| CVE-2009-3129 Known exploited | High 7.8 | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; a… Assigned by microsoft | Nov 11, 2009 |
| CVE-2009-4324 Known exploited | High 7.8 | Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to exe… Assigned by adobe | Dec 15, 2009 |
| CVE-2009-3953 Known exploited | High 8.8 | The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D dat… Assigned by adobe | Jan 13, 2010 |
| CVE-2010-0249 Known exploited | High 8.8 | Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2… Assigned by microsoft | Jan 15, 2010 |
| CVE-2010-0232 Known exploited | High 7.8 | The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold a… Assigned by microsoft | Jan 21, 2010 |
| CVE-2009-3960 Known exploited | Medium 6.5 | Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8… Assigned by adobe | Feb 15, 2010 |
| CVE-2010-0188 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via un… Assigned by adobe | Feb 21, 2010 |
| CVE-2010-0806 Known exploited | High 8.8 | Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving acc… Assigned by microsoft | Mar 10, 2010 |
| CVE-2010-0840 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality,… Assigned by oracle | Apr 1, 2010 |
| CVE-2010-1428 Known exploited | Medium 5.9 | The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for… Assigned by redhat | Apr 28, 2010 |
| CVE-2010-0738 Known exploited | Low 3.7 | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for t… Assigned by redhat | Apr 28, 2010 |
| CVE-2010-1297 Known exploited | High 7.8 | Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote… Assigned by adobe | Jun 8, 2010 |
| CVE-2010-2568 Known exploited | High 7.8 | Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1)… Assigned by microsoft | Jul 22, 2010 |
| CVE-2010-1871 Known exploited | High 8.8 | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows re… Assigned by mitre | Aug 4, 2010 |
| CVE-2010-2861 Known exploited | High 7.5 | Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/ad… Assigned by adobe | Aug 11, 2010 |
| CVE-2010-3035 Known exploited | High 7.5 | Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a cr… Assigned by cisco | Aug 30, 2010 |
| CVE-2010-2883 Known exploited | High 7.3 | Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a deni… Assigned by adobe | Sep 9, 2010 |
| CVE-2010-3765 Known exploited | Critical 9.8 | Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attac… Assigned by mitre | Oct 27, 2010 |
| CVE-2010-3962 Known exploited | High 8.1 | Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the c… Assigned by microsoft | Nov 5, 2010 |
| CVE-2010-3333 Known exploited | High 7.8 | Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac al… Assigned by microsoft | Nov 10, 2010 |
| CVE-2010-2572 Known exploited | High 7.8 | Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerabi… Assigned by microsoft | Nov 10, 2010 |
| CVE-2010-4398 Known exploited | High 7.8 | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2… Assigned by mitre | Dec 3, 2010 |
| CVE-2010-3904 Known exploited | High 7.8 | The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u… Assigned by canonical | Dec 6, 2010 |
| CVE-2010-4345 Known exploited | High 7.8 | Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary comm… Assigned by redhat | Dec 14, 2010 |
