| CVE-2016-9841 | Critical 9.8 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus | May 23, 2017 |
| CVE-2016-9840 | High 8.8 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus | May 23, 2017 |
| CVE-2016-5131 | High 8.8 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via… Assigned by Chrome | Jul 23, 2016 |
| CVE-2016-4171 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016. Assigned by adobe | Jun 16, 2016 |
| CVE-2016-0718 | Critical 9.8 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow. Assigned by redhat | May 26, 2016 |
| CVE-2016-4117 Known exploited | High 7.8 | Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. Assigned by adobe | May 11, 2016 |
| CVE-2016-3718 Known exploited | Medium 5.5 | The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image. Assigned by redhat | May 5, 2016 |
| CVE-2016-3715 Known exploited | Medium 5.5 | The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. Assigned by redhat | May 5, 2016 |
| CVE-2016-3714 Known exploited | High 8.4 | The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code… Assigned by redhat | May 5, 2016 |
| CVE-2016-3427 Known exploited | Critical 9.8 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vector… Assigned by oracle | Apr 21, 2016 |
| CVE-2016-1646 Known exploited | High 8.8 | The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to c… Assigned by Chrome | Mar 29, 2016 |
| CVE-2016-0752 Known exploited | High 7.5 | Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read… Assigned by redhat | Feb 16, 2016 |
| CVE-2015-7575 | Medium 5.9 | Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in T… Assigned by redhat | Jan 9, 2016 |
| CVE-2015-8651 Known exploited | High 8.8 | Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20… Assigned by adobe | Dec 28, 2015 |
| CVE-2015-8126 | High 7.5 | Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x… Assigned by mitre | Nov 13, 2015 |
| CVE-2015-4902 Known exploited | Medium 5.3 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment. Assigned by oracle | Oct 21, 2015 |
| CVE-2015-7645 Known exploited | High 7.8 | Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF f… Assigned by adobe | Oct 15, 2015 |
| CVE-2015-3246 Known exploited | High 7.4 | libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (incon… Assigned by redhat | Aug 11, 2015 |
| CVE-2015-4495 Known exploited | High 8.8 | The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain p… Assigned by mozilla | Aug 8, 2015 |
| CVE-2015-5477 Known exploited | High 7.5 | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. Assigned by mitre | Jul 29, 2015 |
| CVE-2015-2590 Known exploited | Critical 9.8 | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors… Assigned by oracle | Jul 16, 2015 |
| CVE-2015-5119 Known exploited | High 7.8 | Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x t… Assigned by adobe | Jul 8, 2015 |
| CVE-2015-3113 Known exploited | High 7.8 | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbi… Assigned by adobe | Jun 23, 2015 |
| CVE-2015-3043 Known exploited | High 7.8 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of servi… Assigned by adobe | Apr 14, 2015 |
| CVE-2015-0313 Known exploited | High 7.8 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute ar… Assigned by adobe | Feb 2, 2015 |
| CVE-2014-7169 Known exploited | Critical 9.8 | GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or poss… Assigned by mitre | Sep 25, 2014 |
| CVE-2014-6271 Known exploited | Critical 9.8 | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, a… Assigned by debian | Sep 24, 2014 |
| CVE-2014-3153 Known exploited | High 7.8 | The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafte… Assigned by Chrome | Jun 7, 2014 |
| CVE-2014-0160 Known exploited | High 7.5 | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process… Assigned by redhat | Apr 7, 2014 |
| CVE-2014-0502 Known exploited | High 8.8 | Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on… Assigned by adobe | Feb 21, 2014 |
| CVE-2014-0497 Known exploited | High 8.8 | Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute ar… Assigned by adobe | Feb 5, 2014 |
| CVE-2013-1690 Known exploited | High 8.8 | Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with pag… Assigned by mozilla | Jun 26, 2013 |
| CVE-2013-1675 Known exploited | Medium 6.5 | Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mP… Assigned by mozilla | May 16, 2013 |
| CVE-2013-2423 Known exploited | Low 3.7 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors rel… Assigned by oracle | Apr 17, 2013 |
| CVE-2013-0648 Known exploited | High 8.8 | Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and… Assigned by adobe | Feb 27, 2013 |
| CVE-2013-0643 Known exploited | High 8.8 | The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly rest… Assigned by adobe | Feb 27, 2013 |
| CVE-2013-0641 Known exploited | High 7.8 | Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in… Assigned by adobe | Feb 14, 2013 |
| CVE-2013-0640 Known exploited | High 7.8 | Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Assigned by adobe | Feb 14, 2013 |
| CVE-2013-0422 Known exploited | Critical 9.8 | Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a… Assigned by oracle | Jan 10, 2013 |
| CVE-2012-5568 | Medium 5.0 | Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. Assigned by redhat | Nov 30, 2012 |
| CVE-2012-1535 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of ser… Assigned by mitre | Aug 15, 2012 |
| CVE-2012-2034 Known exploited | High 7.5 | Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and be… Assigned by adobe | Jun 9, 2012 |
| CVE-2012-1823 Known exploited | Critical 9.8 | sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which al… Assigned by certcc | May 11, 2012 |
| CVE-2011-0611 Known exploited | High 8.8 | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe R… Assigned by adobe | Apr 13, 2011 |
| CVE-2011-0609 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (ak… Assigned by adobe | Mar 15, 2011 |
| CVE-2010-4345 Known exploited | High 7.8 | Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary comm… Assigned by redhat | Dec 14, 2010 |
| CVE-2010-4344 Known exploited | Critical 9.8 | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conj… Assigned by redhat | Dec 14, 2010 |
| CVE-2010-3904 Known exploited | High 7.8 | The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u… Assigned by canonical | Dec 6, 2010 |
| CVE-2010-1297 Known exploited | High 7.8 | Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote… Assigned by adobe | Jun 8, 2010 |
| CVE-2010-0840 Known exploited | Critical 9.8 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality,… Assigned by oracle | Apr 1, 2010 |
