| CVE-2010-4344 Known exploited | Critical 9.8 | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conj… Assigned by redhat | Dec 14, 2010 |
| CVE-2011-0609 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (ak… Assigned by adobe | Mar 15, 2011 |
| CVE-2011-0611 Known exploited | High 8.8 | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe R… Assigned by adobe | Apr 13, 2011 |
| CVE-2011-1823 Known exploited | High 7.8 | The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privile… Assigned by mitre | Jun 9, 2011 |
| CVE-2011-1889 Known exploited | Critical 9.8 | The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified request… Assigned by microsoft | Jun 16, 2011 |
| CVE-2011-2005 Known exploited | High 7.8 | afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain pri… Assigned by microsoft | Oct 12, 2011 |
| CVE-2011-3544 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java… Assigned by oracle | Oct 19, 2011 |
| CVE-2011-3402 Known exploited | High 8.8 | Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server… Assigned by microsoft | Nov 4, 2011 |
| CVE-2011-2462 Known exploited | High 8.8 | Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute a… Assigned by adobe | Dec 7, 2011 |
| CVE-2011-4723 Known exploited | Medium 5.7 | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors. Assigned by mitre | Dec 20, 2011 |
| CVE-2012-0391 Known exploited | Critical 9.8 | The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allow… Assigned by mitre | Jan 8, 2012 |
| CVE-2012-0767 Known exploited | Medium 6.1 | Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and b… Assigned by adobe | Feb 16, 2012 |
| CVE-2012-0754 Known exploited | High 7.8 | Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attac… Assigned by adobe | Feb 16, 2012 |
| CVE-2012-0158 Known exploited | High 8.8 | The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office… Assigned by microsoft | Apr 10, 2012 |
| CVE-2012-0151 Known exploited | High 7.8 | The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and… Assigned by microsoft | Apr 10, 2012 |
| CVE-2012-1710 Known exploited | Critical 9.8 | Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via u… Assigned by oracle | May 3, 2012 |
| CVE-2012-1823 Known exploited | Critical 9.8 | sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which al… Assigned by certcc | May 11, 2012 |
| CVE-2012-0507 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to a… Assigned by oracle | Jun 7, 2012 |
| CVE-2012-2034 Known exploited | High 7.5 | Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and be… Assigned by adobe | Jun 9, 2012 |
| CVE-2012-1889 Known exploited | High 8.8 | Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi… Assigned by microsoft | Jun 13, 2012 |
| CVE-2012-1723 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows r… Assigned by oracle | Jun 16, 2012 |
| CVE-2012-1854 Known exploited | High 7.8 | Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic… Assigned by microsoft | Jul 10, 2012 |
| CVE-2012-1856 Known exploited | High 8.8 | The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Se… Assigned by microsoft | Aug 15, 2012 |
| CVE-2012-1535 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of ser… Assigned by mitre | Aug 15, 2012 |
| CVE-2012-4681 Known exploited | Critical 9.8 | Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses S… Assigned by mitre | Aug 28, 2012 |
| CVE-2012-4969 Known exploited | High 8.1 | Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as expl… Assigned by mitre | Sep 18, 2012 |
| CVE-2012-5054 Known exploited | High 8.8 | Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments. Assigned by adobe | Sep 24, 2012 |
| CVE-2012-5076 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, rela… Assigned by oracle | Oct 16, 2012 |
| CVE-2012-3152 Known exploited | Critical 9.1 | Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via un… Assigned by oracle | Oct 16, 2012 |
| CVE-2012-0518 Known exploited | Medium 4.7 | Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to R… Assigned by oracle | Oct 16, 2012 |
| CVE-2012-2539 Known exploited | High 7.8 | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a d… Assigned by microsoft | Dec 12, 2012 |
| CVE-2012-4792 Known exploited | High 8.8 | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not pro… Assigned by microsoft | Dec 30, 2012 |
| CVE-2013-0631 Known exploited | High 7.5 | Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013. Assigned by adobe | Jan 9, 2013 |
| CVE-2013-0629 Known exploited | High 7.5 | Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013. Assigned by adobe | Jan 9, 2013 |
| CVE-2013-0625 Known exploited | Critical 9.8 | Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited i… Assigned by adobe | Jan 9, 2013 |
| CVE-2013-0422 Known exploited | Critical 9.8 | Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a… Assigned by oracle | Jan 10, 2013 |
| CVE-2013-0632 Known exploited | Critical 9.8 | administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the defau… Assigned by adobe | Jan 17, 2013 |
| CVE-2013-0431 Known exploited | Low 3.7 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandb… Assigned by oracle | Jan 31, 2013 |
| CVE-2013-0641 Known exploited | High 7.8 | Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in… Assigned by adobe | Feb 14, 2013 |
| CVE-2013-0640 Known exploited | High 7.8 | Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Assigned by adobe | Feb 14, 2013 |
| CVE-2013-0648 Known exploited | High 8.8 | Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and… Assigned by adobe | Feb 27, 2013 |
| CVE-2013-0643 Known exploited | High 8.8 | The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly rest… Assigned by adobe | Feb 27, 2013 |
| CVE-2013-2551 Known exploited | High 8.8 | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstr… Assigned by mitre | Mar 11, 2013 |
| CVE-2013-0074 Known exploited | High 7.8 | Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a cr… Assigned by microsoft | Mar 13, 2013 |
| CVE-2013-2596 Known exploited | High 7.8 | Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to crea… Assigned by mitre | Apr 13, 2013 |
| CVE-2013-2423 Known exploited | Low 3.7 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors rel… Assigned by oracle | Apr 17, 2013 |
| CVE-2013-1347 Known exploited | High 8.8 | Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is… Assigned by microsoft | May 5, 2013 |
| CVE-2013-2094 Known exploited | High 8.4 | The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open… Assigned by redhat | May 14, 2013 |
| CVE-2013-2729 Known exploited | High 8.8 | Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerabilit… Assigned by adobe | May 16, 2013 |
| CVE-2013-1675 Known exploited | Medium 6.5 | Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mP… Assigned by mozilla | May 16, 2013 |
