| CVE-2009-1537 Known exploited | High 8.8 | Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 S… Assigned by microsoft | May 29, 2009 |
| CVE-2009-0563 Known exploited | High 7.8 | Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Vi… Assigned by microsoft | Jun 10, 2009 |
| CVE-2009-1123 Known exploited | High 7.8 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows… Assigned by microsoft | Jun 10, 2009 |
| CVE-2009-0557 Known exploited | High 7.8 | Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Micros… Assigned by microsoft | Jun 10, 2009 |
| CVE-2008-0015 Known exploited | High 8.8 | Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microso… Assigned by mitre | Jul 7, 2009 |
| CVE-2009-1862 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or… Assigned by mitre | Jul 23, 2009 |
| CVE-2009-2055 Known exploited | Medium 5.9 | Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009. Assigned by cisco | Aug 19, 2009 |
| CVE-2009-3459 Known exploited | High 8.8 | Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers me… Assigned by adobe | Oct 13, 2009 |
| CVE-2009-3129 Known exploited | High 7.8 | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; a… Assigned by microsoft | Nov 11, 2009 |
| CVE-2009-4324 Known exploited | High 7.8 | Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to exe… Assigned by adobe | Dec 15, 2009 |
| CVE-2009-3953 Known exploited | High 8.8 | The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D dat… Assigned by adobe | Jan 13, 2010 |
| CVE-2010-0249 Known exploited | High 8.8 | Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2… Assigned by microsoft | Jan 15, 2010 |
| CVE-2010-0232 Known exploited | High 7.8 | The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold a… Assigned by microsoft | Jan 21, 2010 |
| CVE-2009-3960 Known exploited | Medium 6.5 | Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8… Assigned by adobe | Feb 15, 2010 |
| CVE-2010-0188 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via un… Assigned by adobe | Feb 21, 2010 |
| CVE-2010-0806 Known exploited | High 8.8 | Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving acc… Assigned by microsoft | Mar 10, 2010 |
| CVE-2010-0840 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality,… Assigned by oracle | Apr 1, 2010 |
| CVE-2010-1428 Known exploited | Medium 5.9 | The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for… Assigned by redhat | Apr 28, 2010 |
| CVE-2010-0738 Known exploited | Low 3.7 | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for t… Assigned by redhat | Apr 28, 2010 |
| CVE-2010-1297 Known exploited | High 7.8 | Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote… Assigned by adobe | Jun 8, 2010 |
| CVE-2010-2568 Known exploited | High 7.8 | Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1)… Assigned by microsoft | Jul 22, 2010 |
| CVE-2010-1871 Known exploited | High 8.8 | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows re… Assigned by mitre | Aug 4, 2010 |
| CVE-2010-2861 Known exploited | High 7.5 | Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/ad… Assigned by adobe | Aug 11, 2010 |
| CVE-2010-3035 Known exploited | High 7.5 | Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a cr… Assigned by cisco | Aug 30, 2010 |
| CVE-2010-2883 Known exploited | High 7.3 | Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a deni… Assigned by adobe | Sep 9, 2010 |
| CVE-2010-3765 Known exploited | Critical 9.8 | Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attac… Assigned by mitre | Oct 27, 2010 |
| CVE-2010-3962 Known exploited | High 8.1 | Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the c… Assigned by microsoft | Nov 5, 2010 |
| CVE-2010-3333 Known exploited | High 7.8 | Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac al… Assigned by microsoft | Nov 10, 2010 |
| CVE-2010-2572 Known exploited | High 7.8 | Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerabi… Assigned by microsoft | Nov 10, 2010 |
| CVE-2010-4398 Known exploited | High 7.8 | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2… Assigned by mitre | Dec 3, 2010 |
| CVE-2010-3904 Known exploited | High 7.8 | The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u… Assigned by canonical | Dec 6, 2010 |
| CVE-2010-4345 Known exploited | High 7.8 | Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary comm… Assigned by redhat | Dec 14, 2010 |
| CVE-2010-4344 Known exploited | Critical 9.8 | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conj… Assigned by redhat | Dec 14, 2010 |
| CVE-2011-0609 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (ak… Assigned by adobe | Mar 15, 2011 |
| CVE-2011-0611 Known exploited | High 8.8 | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe R… Assigned by adobe | Apr 13, 2011 |
| CVE-2011-1823 Known exploited | High 7.8 | The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privile… Assigned by mitre | Jun 9, 2011 |
| CVE-2011-1889 Known exploited | Critical 9.8 | The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified request… Assigned by microsoft | Jun 16, 2011 |
| CVE-2011-3386 Healthcare | Medium 4.0 | Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service (adv… Assigned by mitre | Sep 2, 2011 |
| CVE-2011-3389 | Medium 4.3 | The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode wi… Assigned by mitre | Sep 6, 2011 |
| CVE-2011-2005 Known exploited | High 7.8 | afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain pri… Assigned by microsoft | Oct 12, 2011 |
| CVE-2011-3544 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java… Assigned by oracle | Oct 19, 2011 |
| CVE-2011-3402 Known exploited | High 8.8 | Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server… Assigned by microsoft | Nov 4, 2011 |
| CVE-2011-2462 Known exploited | High 8.8 | Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute a… Assigned by adobe | Dec 7, 2011 |
| CVE-2011-4723 Known exploited | Medium 5.7 | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors. Assigned by mitre | Dec 20, 2011 |
| CVE-2012-0391 Known exploited | Critical 9.8 | The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allow… Assigned by mitre | Jan 8, 2012 |
| CVE-2012-0992 Healthcare | High 8.5 | interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter. Assigned by mitre | Feb 7, 2012 |
| CVE-2012-0991 Healthcare | Low 3.5 | Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. Assigned by mitre | Feb 7, 2012 |
| CVE-2012-0767 Known exploited | Medium 6.1 | Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and b… Assigned by adobe | Feb 16, 2012 |
| CVE-2012-0754 Known exploited | High 7.8 | Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attac… Assigned by adobe | Feb 16, 2012 |
| CVE-2012-0158 Known exploited | High 8.8 | The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office… Assigned by microsoft | Apr 10, 2012 |
