Latest vulnerabilities

1,125 results · Clear filters · Feed

• High 8.8
  CVE-2014-0322 Exploited Public exploit EPSS 85%

  Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  Feb 14, 2014

  KEV May 4, 2022
• High 8.8
  CVE-2014-0497 Exploited Public exploit EPSS 100%

  Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and M…

  Feb 5, 2014

  KEV Sep 17, 2024
• Medium 5.5
  CVE-2013-3900 Exploited Public exploit EPSS 45%

  WinVerifyTrust Signature Validation Vulnerability

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Wind…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 11, 2013

  KEV Jan 10, 2022
• High 7.8
  CVE-2013-5065 Exploited Public exploit EPSS 35%

  NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

  Nov 27, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-6282 Exploited Public exploit EPSS 40%

  The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

  linux Debian
  Nov 19, 2013

  KEV Sep 15, 2022
• Medium 5.4
  CVE-2013-5223 Exploited Public exploit EPSS 51%

  Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated us…

  Nov 15, 2013

  KEV Mar 25, 2022
• High 8.8
  CVE-2013-3918 Exploited Public exploit EPSS 74%

  The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Serve…

  Nov 12, 2013

  KEV Oct 6, 2025
• High 7.8
  CVE-2013-3906 Exploited Public exploit EPSS 85%

  GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

  Nov 6, 2013

  KEV Feb 15, 2022
• High 8.8
  CVE-2013-3897 Exploited Public exploit EPSS 77%

  Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

  Oct 9, 2013

  KEV Mar 3, 2022
• Medium 5.5
  CVE-2013-3896 Exploited Public exploit EPSS 67%

  Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…

  Oct 9, 2013

  KEV May 25, 2022
• High 8.8
  CVE-2013-3893 Exploited Public exploit EPSS 88%

  Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throu…

  Sep 18, 2013

  KEV Aug 12, 2025
• Critical 9.8
  CVE-2013-4810 Exploited Public exploit EPSS 79%

  HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle…

  Sep 13, 2013

  KEV Mar 25, 2022
• High 8.8
  CVE-2013-3346 Exploited Public exploit EPSS 79%

  Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

  Aug 30, 2013

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2013-2251 Exploited Public exploit EPSS 100%

  Code injection in Apache Struts

  Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

  org.apache.struts:struts2-core Maven
  Jul 18, 2013

  KEV Mar 25, 2022
• High 8.8
  CVE-2013-3163 Exploited Public exploit EPSS 71%

  Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  Jul 10, 2013

  KEV Mar 30, 2023
• High 8.8
  CVE-2013-1690 Exploited Public exploit EPSS 69%

  Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…

  Jun 26, 2013

  KEV Mar 28, 2022
• Critical 9.8
  CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  Jun 18, 2013

  KEV Mar 28, 2022
• High 7.8
  CVE-2013-3660 Exploited Public exploit EPSS 39%

  The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Wind…

  May 24, 2013

  KEV Mar 28, 2022
• High 8.8
  CVE-2013-2729 Exploited Public exploit EPSS 67%

  Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attac…

  May 16, 2013

  KEV Mar 28, 2022
• High 8.4
  CVE-2013-2094 Exploited Public exploit EPSS 48%

  The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data …

  linux Debian
  May 14, 2013

  KEV Sep 15, 2022
• High 8.8
  CVE-2013-1347 Exploited Public exploit EPSS 78%

  Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  May 5, 2013

  KEV Mar 3, 2022
• Low 3.7
  CVE-2013-2423 Exploited Public exploit EPSS 85%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, an…

  Apr 17, 2013

  KEV May 25, 2022
• High 7.8
  CVE-2013-2596 Exploited Public exploit

  Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

  linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
  Apr 13, 2013

  KEV Sep 15, 2022
• High 7.8
  CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

  Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

  Mar 13, 2013

  KEV May 25, 2022
• High 8.8
  CVE-2013-2551 Exploited · Ransomware Public exploit EPSS 74%

  Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  Mar 11, 2013

  KEV Mar 28, 2022
• High 7.8
  CVE-2013-0640 Exploited Public exploit EPSS 87%

  Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

  Feb 14, 2013

  KEV Mar 3, 2022
• Low 3.7
  CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

  Jan 31, 2013

  KEV May 25, 2022
• Critical 9.8
  CVE-2013-0632 Exploited Public exploit EPSS 93%

  administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…

  Jan 17, 2013

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2013-0422 Exploited · Ransomware Public exploit EPSS 97%

  Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…

  Jan 10, 2013

  KEV May 25, 2022
• Critical 9.8
  CVE-2013-0625 Exploited Public exploit EPSS 94%

  Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentica…

  Jan 9, 2013

  KEV Mar 7, 2022
• High 7.5
  CVE-2013-0629 Exploited Public exploit EPSS 66%

  Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted di…

  Jan 9, 2013

  KEV Mar 7, 2022
• High 8.8
  CVE-2012-4792 Exploited Public exploit EPSS 79%

  Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary co…

  Dec 30, 2012

  KEV Jul 23, 2024
• Critical 9.1
  CVE-2012-3152 Exploited Public exploit EPSS 99%

  Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and…

  Oct 16, 2012

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2012-5076 Exploited Public exploit EPSS 91%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allo…

  Oct 16, 2012

  KEV Mar 28, 2022
• High 8.1
  CVE-2012-4969 Exploited Public exploit EPSS 80%

  Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…

  Sep 18, 2012

  KEV Jun 8, 2022
• Critical 9.8
  CVE-2012-4681 Exploited · Ransomware Public exploit EPSS 99%

  Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…

  Aug 28, 2012

  KEV Mar 3, 2022
• High 7.8
  CVE-2012-1535 Exploited Public exploit EPSS 70%

  Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …

  Aug 15, 2012

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2012-1723 Exploited · Ransomware Public exploit EPSS 94%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 u…

  Jun 16, 2012

  KEV Mar 3, 2022
• High 8.8
  CVE-2012-1889 Exploited Public exploit EPSS 84%

  Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…

  Jun 13, 2012

  KEV Jun 8, 2022
• Critical 9.8
  CVE-2012-0507 Exploited · Ransomware Public exploit EPSS 98%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 U…

  Jun 7, 2012

  KEV Mar 3, 2022