ENISA EU Vulnerability Database

4,286 results · Clear filters · Feed

• High —
  CVE-2010-3714 Public exploit EPSS 24%

  TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism

  The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers …

  typo3/cms Packagist
  Oct 25, 2010
• High —
  CVE-2010-3313 Public exploit

  EGroupware Code Injection vulnerability

  phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote at…

  egroupware/egroupware Packagist
  Sep 22, 2010
• High 7.3
  CVE-2010-2883 Exploited Public exploit EPSS 81%

  Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows…

  Sep 9, 2010

  KEV Jun 8, 2022
• High 7.8
  CVE-2010-1889 Public exploit

  Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, a…

  Aug 11, 2010
• High 7.5
  CVE-2010-2861 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow r…

  Aug 11, 2010

  KEV Mar 25, 2022
• High 7.8
  CVE-2010-2554 Public exploit

  The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Win…

  Aug 11, 2010
• High 8.8
  CVE-2010-1871 Exploited Public exploit EPSS 83%

  JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly…

  Aug 4, 2010

  KEV Dec 10, 2021
• High 7.8
  CVE-2010-2568 Exploited Public exploit EPSS 90%

  Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 al…

  Jul 22, 2010

  KEV Sep 15, 2022
• High 7.8
  CVE-2010-1297 Exploited Public exploit EPSS 83%

  Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

  Jun 8, 2010

  KEV Jun 8, 2022
• High 8.8
  CVE-2010-0806 Exploited Public exploit EPSS 82%

  Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, a…

  Mar 10, 2010

  KEV May 20, 2026
• High 7.8
  CVE-2010-0188 Exploited · Ransomware Public exploit EPSS 88%

  Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a…

  Feb 21, 2010

  KEV Mar 3, 2022
• High 8.1
  CVE-2010-0248 Public exploit EPSS 53%

  Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…

  Jan 22, 2010
• High 7.8
  CVE-2010-0232 Exploited Public exploit EPSS 29%

  The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows S…

  Jan 21, 2010

  KEV Mar 3, 2022
• High 8.8
  CVE-2010-0249 Exploited Public exploit EPSS 92%

  Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and …

  Jan 15, 2010

  KEV May 20, 2026
• High 8.8
  CVE-2009-3953 Exploited Public exploit EPSS 83%

  The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

  Jan 13, 2010

  KEV Jun 8, 2022
• High 7.8
  CVE-2009-4324 Exploited Public exploit EPSS 82%

  Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…

  Dec 15, 2009

  KEV Jun 8, 2022
• High 7.8
  CVE-2009-3129 Exploited Public exploit EPSS 84%

  Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Con…

  Nov 11, 2009

  KEV Mar 3, 2022
• High 8.8
  CVE-2009-1547 Public exploit EPSS 37%

  Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute a…

  Oct 14, 2009
• High 8.8
  CVE-2009-3459 Exploited Public exploit EPSS 87%

  Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows re…

  Oct 13, 2009

  KEV May 20, 2026
• High 8.8
  CVE-2008-0015 Exploited Public exploit EPSS 77%

  Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used i…

  Jul 7, 2009

  KEV Feb 17, 2026
• High —
  CVE-2008-5518 Public exploit EPSS 36%

  Apache Geronimo Application Server multiple directory traversal vulnerabilities

  Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) grou…

  org.apache.geronimo.plugins:console Maven
  Apr 17, 2009
• High 8.8
  CVE-2009-0927 Exploited Public exploit EPSS 97%

  Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …

  Mar 19, 2009

  KEV Mar 25, 2022
• High —
  CVE-2008-5619 Public exploit EPSS 59%

  PHPMailer susceptible to arbitrary code execution

  html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is proc…

  roundcube phpmailer/phpmailer Debian Packagist
  Dec 17, 2008
• High —
  CVE-2008-4310 Public exploit EPSS 14%

  WEBrick Denial of Service Vulnerability

  httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-…

  webrick RubyGems
  Dec 9, 2008
• High 7.8
  CVE-2008-2992 Exploited · Ransomware Public exploit EPSS 100%

  Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …

  Nov 4, 2008

  KEV Mar 3, 2022
• High —
  CVE-2008-4524 Public exploit

  AdaptCMS SQL Injection vulnerability

  SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.

  adaptcms/adaptcms Packagist
  Oct 9, 2008
• High 8.1
  CVE-2008-4128 Exploited Public exploit EPSS 34%

  Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on th…

  Sep 18, 2008

  KEV Jul 13, 2026
• High 8.8
  CVE-2008-3431 Exploited Public exploit

  The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…

  Aug 5, 2008

  KEV Mar 3, 2022
• High 8.1
  CVE-2008-1083 Public exploit EPSS 57%

  Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server…

  Apr 8, 2008
• High 7.8
  CVE-2007-5659 Exploited Public exploit EPSS 87%

  Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…

  Feb 12, 2008

  KEV Jun 8, 2022
• High —
  CVE-2002-2272 Public exploit

  Apache Tomcat DoS via Malicious Get Request

  Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

  org.apache.tomcat:tomcat Maven
  Oct 18, 2007
• High 7.5
  CVE-2007-0342 Public exploit

  WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicat…

  Jan 18, 2007
• High 7.8
  CVE-2007-0257 Public exploit

  Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unsp…

  Jan 16, 2007
• High 8.8
  CVE-2006-5014 Public exploit

  Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unsp…

  Sep 27, 2006
• High 8.8
  CVE-2006-3730 Public exploit EPSS 64%

  Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of servic…

  Jul 19, 2006
• High 7.3
  CVE-2006-2362 Public exploit EPSS 14%

  Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GN…

  binutils Debian
  May 15, 2006
• High 7.3
  CVE-2005-3302 Public exploit

  Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a h…

  blender Debian
  Oct 24, 2005
• High 7.8
  CVE-2001-1546 Public exploit

  Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…

  Jul 14, 2005
• High 7.4
  CVE-2005-1794 Public exploit EPSS 18%

  Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it…

  Jun 1, 2005
• High 7.8
  CVE-2004-0210 Exploited Public exploit

  The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain p…

  Jul 14, 2004

  KEV Mar 3, 2022