Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.

Tracked: 409,241
Last 24h: 581
Critical, 7 days: 356
Known exploited: 1,779

All Critical High Medium Low Exploited only Public exploit

1,796 results · Clear filters · Feed

High 8.8

CVE-2013-6282 Exploited Public exploit EPSS 40%

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

linux Debian

Nov 19, 2013
KEV Sep 15, 2022
Medium 5.4

CVE-2013-5223 Exploited Public exploit EPSS 51%

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated us…

Nov 15, 2013
KEV Mar 25, 2022
High 8.8

CVE-2013-3918 Exploited Public exploit EPSS 74%

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Serve…

Nov 12, 2013
KEV Oct 6, 2025
High 7.8

CVE-2013-3906 Exploited Public exploit EPSS 85%

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

Nov 6, 2013
KEV Feb 15, 2022
High 8.8

CVE-2013-3897 Exploited Public exploit EPSS 77%

Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

Oct 9, 2013
KEV Mar 3, 2022
Medium 5.5

CVE-2013-3896 Exploited Public exploit EPSS 67%

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…

Oct 9, 2013
KEV May 25, 2022
High 8.8

CVE-2013-3893 Exploited Public exploit EPSS 88%

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throu…

Sep 18, 2013
KEV Aug 12, 2025
Critical 9.8

CVE-2013-4810 Exploited Public exploit EPSS 79%

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle…

Sep 13, 2013
KEV Mar 25, 2022
High 8.8

CVE-2013-3346 Exploited Public exploit EPSS 79%

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

Aug 30, 2013
KEV Mar 3, 2022
Critical 9.8

CVE-2013-2251 Exploited Public exploit EPSS 100%

Code injection in Apache Struts

Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

org.apache.struts:struts2-core Maven

Jul 18, 2013
KEV Mar 25, 2022
High 8.8

CVE-2013-3163 Exploited Public exploit EPSS 71%

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

Jul 10, 2013
KEV Mar 30, 2023
High 8.8

CVE-2013-1690 Exploited Public exploit EPSS 69%

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…

Jun 26, 2013
KEV Mar 28, 2022
Critical 9.8

CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

Jun 18, 2013
KEV Mar 28, 2022
High 7.8

CVE-2013-1331 Exploited EPSS 80%

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code …

Jun 12, 2013
KEV Jun 8, 2022
High 7.8

CVE-2013-3660 Exploited Public exploit EPSS 39%

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Wind…

May 24, 2013
KEV Mar 28, 2022
Medium 6.5

CVE-2013-1675 Exploited

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before…

May 16, 2013
KEV Mar 3, 2022
High 8.8

CVE-2013-2729 Exploited Public exploit EPSS 67%

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attac…

May 16, 2013
KEV Mar 28, 2022
High 8.4

CVE-2013-2094 Exploited Public exploit EPSS 48%

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data …

linux Debian

May 14, 2013
KEV Sep 15, 2022
High 8.8

CVE-2013-1347 Exploited Public exploit EPSS 78%

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

May 5, 2013
KEV Mar 3, 2022
Low 3.7

CVE-2013-2423 Exploited Public exploit EPSS 85%

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, an…

Apr 17, 2013
KEV May 25, 2022
High 7.8

CVE-2013-2596 Exploited Public exploit

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu

Apr 13, 2013
KEV Sep 15, 2022
High 7.8

CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

Mar 13, 2013
KEV May 25, 2022
High 8.8

CVE-2013-2551 Exploited · Ransomware Public exploit EPSS 74%

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

Mar 11, 2013
KEV Mar 28, 2022
High 8.8

CVE-2013-0648 Exploited EPSS 11%

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 …

Feb 27, 2013
KEV Sep 17, 2024
High 8.8

CVE-2013-0643 Exploited EPSS 11%

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and …

Feb 27, 2013
KEV Sep 17, 2024
High 7.8

CVE-2013-0640 Exploited Public exploit EPSS 87%

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

Feb 14, 2013
KEV Mar 3, 2022
High 7.8

CVE-2013-0641 Exploited EPSS 32%

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote…

Feb 14, 2013
KEV Mar 3, 2022
Low 3.7

CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

Jan 31, 2013
KEV May 25, 2022
Critical 9.8

CVE-2013-0632 Exploited Public exploit EPSS 93%

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…

Jan 17, 2013
KEV Mar 3, 2022
Critical 9.8

CVE-2013-0422 Exploited · Ransomware Public exploit EPSS 97%

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…

Jan 10, 2013
KEV May 25, 2022
Critical 9.8

CVE-2013-0625 Exploited Public exploit EPSS 94%

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentica…

Jan 9, 2013
KEV Mar 7, 2022
High 7.5

CVE-2013-0629 Exploited Public exploit EPSS 66%

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted di…

Jan 9, 2013
KEV Mar 7, 2022
High 7.5

CVE-2013-0631 Exploited EPSS 66%

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exp…

Jan 9, 2013
KEV Mar 7, 2022
High 8.8

CVE-2012-4792 Exploited Public exploit EPSS 79%

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary co…

Dec 30, 2012
KEV Jul 23, 2024
High 7.8

CVE-2012-2539 Exploited EPSS 53%

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office…

Dec 12, 2012
KEV Mar 28, 2022
Unscored —

CVE-2011-4085 Exploited

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0…

Nov 23, 2012
Medium 4.7

CVE-2012-0518 Exploited

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.…

Oct 16, 2012
KEV Mar 28, 2022
Critical 9.1

CVE-2012-3152 Exploited Public exploit EPSS 99%

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and…

Oct 16, 2012
KEV Nov 3, 2021
Critical 9.8

CVE-2012-5076 Exploited Public exploit EPSS 91%

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allo…

Oct 16, 2012
KEV Mar 28, 2022
High 8.8

CVE-2012-5054 Exploited EPSS 21%

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows rem…

Sep 24, 2012
KEV Jun 8, 2022

Latest vulnerabilities

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated us…

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Serve…

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throu…

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle…

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

Code injection in Apache Struts

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code …

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Wind…

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before…

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attac…

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data …

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, an…

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 …

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and …

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentica…

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted di…

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exp…

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary co…

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office…

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0…

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.…

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allo…

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows rem…