Skip to content
OpenAdvisories

Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.

Tracked
408,954
Last 24h
2,010
Critical, 7 days
353
Known exploited
1,779

1,125 results · Clear filters · Feed

  • Critical 9.8
    CVE-2012-1823 Exploited Public exploit EPSS 100%

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does no…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2012-0158 Exploited · Ransomware Public exploit EPSS 100%

    The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Control…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2012-0754 Exploited Public exploit EPSS 91%

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2012-0391 Exploited Public exploit EPSS 76%

    Apache Struts Remote Java Code Execution

    The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a craf…

    KEV Jan 21, 2022
  • High 8.8
    CVE-2011-2462 Exploited Public exploit EPSS 89%

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2011-3544 Exploited Public exploit EPSS 97%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2011-2005 Exploited Public exploit EPSS 32%

    afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly vali…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2011-0611 Exploited Public exploit EPSS 99%

    Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2011-0609 Exploited Public exploit EPSS 64%

    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2010-4344 Exploited Public exploit EPSS 72%

    Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to ex…

    KEV Mar 25, 2022
  • High 7.8
    CVE-2010-4345 Exploited Public exploit EPSS 18%

    Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to speci…

    KEV Mar 25, 2022
  • High 7.8
    CVE-2010-3904 Exploited Public exploit EPSS 16%

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the…

    KEV May 12, 2023
  • High 7.8
    CVE-2010-4398 Exploited Public exploit

    Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, W…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2010-3333 Exploited Public exploit EPSS 89%

    Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and …

    KEV Mar 3, 2022
  • High 8.1
    CVE-2010-3962 Exploited Public exploit EPSS 97%

    Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary co…

    KEV Oct 6, 2025
  • Critical 9.8
    CVE-2010-3765 Exploited Public exploit EPSS 83%

    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, …

    KEV Oct 6, 2025
  • High 7.3
    CVE-2010-2883 Exploited Public exploit EPSS 81%

    Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows…

    KEV Jun 8, 2022
  • High 7.5
    CVE-2010-2861 Exploited · Ransomware Public exploit EPSS 100%

    Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow r…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2010-1871 Exploited Public exploit EPSS 83%

    JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly…

    KEV Dec 10, 2021
  • High 7.8
    CVE-2010-2568 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 al…

    KEV Sep 15, 2022
  • High 7.8
    CVE-2010-1297 Exploited Public exploit EPSS 83%

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

    KEV Jun 8, 2022
  • Low 3.7
    CVE-2010-0738 Exploited · Ransomware Public exploit EPSS 74%

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

    KEV May 25, 2022
  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • Critical 9.8
    CVE-2010-0840 Exploited Public exploit EPSS 96%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18…

    KEV May 25, 2022
  • High 8.8
    CVE-2010-0806 Exploited Public exploit EPSS 82%

    Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, a…

    KEV May 20, 2026
  • High 7.8
    CVE-2010-0188 Exploited · Ransomware Public exploit EPSS 88%

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a…

    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2009-3960 Exploited · Ransomware Public exploit EPSS 90%

    Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Servic…

    KEV Mar 7, 2022
  • High 7.8
    CVE-2010-0232 Exploited Public exploit EPSS 29%

    The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows S…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2010-0249 Exploited Public exploit EPSS 92%

    Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and …

    KEV May 20, 2026
  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-4324 Exploited Public exploit EPSS 82%

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-3129 Exploited Public exploit EPSS 84%

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Con…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2009-3459 Exploited Public exploit EPSS 87%

    Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows re…

    KEV May 20, 2026
  • High 8.8
    CVE-2008-0015 Exploited Public exploit EPSS 77%

    Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used i…

    KEV Feb 17, 2026
  • Critical 9.8
    CVE-2009-1151 Exploited Public exploit EPSS 97%

    Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2009-0927 Exploited Public exploit EPSS 97%

    Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …

    KEV Mar 25, 2022
  • High 7.8
    CVE-2008-2992 Exploited · Ransomware Public exploit EPSS 100%

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …

    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2008-4250 Exploited Public exploit EPSS 99%

    The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2…

    KEV May 20, 2026
  • High 8.1
    CVE-2008-4128 Exploited Public exploit EPSS 34%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on th…

    KEV Jul 13, 2026
  • High 8.8
    CVE-2008-3431 Exploited Public exploit

    The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…

    KEV Mar 3, 2022