Latest vulnerabilities

472 results · Clear filters · Feed

• Critical 9.8
  CVE-2015-7450 Exploited Public exploit Scanner template EPSS 98%

  Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and…

  Jan 2, 2016

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2015-7755 Exploited Public exploit EPSS 61%

  Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0…

  Dec 19, 2015

  KEV Oct 2, 2025
• Critical 9.8
  CVE-2015-4852 Exploited Public exploit EPSS 95%

  The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers…

  openjdk-8 libcommons-collections3-java Ubuntu
  Nov 18, 2015

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2015-3306 Exploited Public exploit Scanner template EPSS 99%

  The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

  proftpd-dfsg proftpd-dfsg Debian Ubuntu
  May 18, 2015

  KEV Oct 8, 2026
• Critical 9.8
  CVE-2014-8361 Exploited Public exploit EPSS 100%

  The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClie…

  May 1, 2015

  KEV Sep 18, 2023
• Critical 9.8
  CVE-2015-1635 Exploited Public exploit Scanner template EPSS 100%

  HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold a…

  Apr 14, 2015

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2015-1427 Exploited Public exploit Scanner template EPSS 100%

  Improper Access Control in Elasticsearch

  The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

  org.elasticsearch:elasticsearch Maven
  Feb 17, 2015

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2014-6287 Exploited Public exploit Scanner template EPSS 99%

  The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c …

  Oct 7, 2014

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2014-7169 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

  bash bash Debian Ubuntu
  Sep 25, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

  GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

  bash bash Debian Ubuntu
  Sep 24, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-0780 Exploited Public exploit EPSS 75%

  InduSoft Web Studio Path Traversal

  Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

  InduSoft Web Studio
  Apr 25, 2014

  KEV Apr 15, 2022
• Critical 9.8
  CVE-2013-4810 Exploited Public exploit EPSS 79%

  HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle…

  Sep 13, 2013

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2013-2251 Exploited Public exploit Scanner template EPSS 100%

  Code injection in Apache Struts

  Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

  org.apache.struts:struts2-core Maven
  Jul 18, 2013

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  Jun 18, 2013

  KEV Mar 28, 2022
• Critical 9.8
  CVE-2013-0632 Exploited Public exploit EPSS 93%

  administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…

  Jan 17, 2013

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2013-0422 Exploited · Ransomware Public exploit EPSS 97%

  Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…

  Jan 10, 2013

  KEV May 25, 2022
• Critical 9.8
  CVE-2013-0625 Exploited Public exploit EPSS 94%

  Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentica…

  Jan 9, 2013

  KEV Mar 7, 2022
• Critical 9.1
  CVE-2012-3152 Exploited Public exploit EPSS 99%

  Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and…

  Oct 16, 2012

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2012-5076 Exploited Public exploit EPSS 91%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allo…

  Oct 16, 2012

  KEV Mar 28, 2022
• Critical 9.8
  CVE-2012-4681 Exploited · Ransomware Public exploit EPSS 99%

  Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…

  Aug 28, 2012

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2012-1723 Exploited · Ransomware Public exploit EPSS 94%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 u…

  Jun 16, 2012

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2012-0507 Exploited · Ransomware Public exploit EPSS 98%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 U…

  Jun 7, 2012

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2012-1823 Exploited Public exploit Scanner template EPSS 100%

  sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does no…

  May 11, 2012

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2012-0391 Exploited Public exploit EPSS 76%

  Apache Struts Remote Java Code Execution

  The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a craf…

  org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  Jan 8, 2012

  KEV Jan 21, 2022
• Critical 9.8
  CVE-2011-3544 Exploited Public exploit EPSS 97%

  Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and…

  Oct 19, 2011

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2010-4344 Exploited Public exploit EPSS 72%

  Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to ex…

  exim4 Debian
  Dec 14, 2010

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2010-3765 Exploited Public exploit EPSS 83%

  Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, …

  Oct 27, 2010

  KEV Oct 6, 2025
• Critical 9.8
  CVE-2010-0840 Exploited Public exploit EPSS 96%

  Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18…

  Apr 1, 2010

  KEV May 25, 2022
• Critical 9.8
  CVE-2009-1151 Exploited Public exploit Scanner template EPSS 97%

  Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…

  phpmyadmin Debian
  Mar 26, 2009

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2008-4250 Exploited Public exploit EPSS 99%

  The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2…

  Oct 23, 2008

  KEV May 20, 2026
• Critical 9.8
  CVE-2007-3010 Exploited Public exploit Scanner template EPSS 97%

  masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows re…

  Sep 18, 2007

  KEV Apr 15, 2022
• Critical 9.8
  CVE-2005-2773 Exploited Public exploit EPSS 75%

  HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metac…

  Sep 2, 2005

  KEV Mar 25, 2022