Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,440
- Last 24h
- 649
- Critical, 7 days
- 336
- Known exploited
- 1,779
4,273 results · Clear filters · Feed
-
High 8.8
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and …
KEV May 20, 2026 -
High 8.8
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…
KEV Jun 8, 2022 -
High 7.8
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…
KEV Jun 8, 2022 -
High 7.8
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Con…
KEV Mar 3, 2022 -
High 8.8
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute a…
-
High 8.8
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows re…
KEV May 20, 2026 -
High 8.8
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used i…
KEV Feb 17, 2026 -
High —
Apache Geronimo Application Server multiple directory traversal vulnerabilities
Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) grou…
-
High 8.8
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …
KEV Mar 25, 2022 -
High —
PHPMailer susceptible to arbitrary code execution
html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is proc…
-
High —
WEBrick Denial of Service Vulnerability
httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-…
-
High 7.8
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …
KEV Mar 3, 2022 -
High —CVE-2008-4524 Public exploit
AdaptCMS SQL Injection vulnerability
SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.
-
High 8.1
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on th…
KEV Jul 13, 2026 -
High 8.8
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…
KEV Mar 3, 2022 -
High 8.1
Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server…
-
High 7.8
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…
KEV Jun 8, 2022 -
High —CVE-2002-2272 Public exploit
Apache Tomcat DoS via Malicious Get Request
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
-
High 7.5CVE-2007-0342 Public exploit
WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicat…
-
High 7.8CVE-2007-0257 Public exploit
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unsp…
-
High 8.8CVE-2006-5014 Public exploit
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unsp…
-
High 8.8
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of servic…
-
High 7.3
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GN…
-
High 7.3CVE-2005-3302 Public exploit
Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a h…
-
High 7.8CVE-2001-1546 Public exploit
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…
-
High 7.4
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it…
-
High 7.8
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain p…
KEV Mar 3, 2022 -
High 7.8
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…
KEV Mar 3, 2022 -
High 7.3
webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metachara…
-
High 8.4CVE-1999-0038 Public exploit
Buffer overflow in xlock program allows local users to execute commands as root.
-
High 8.4CVE-1999-0029 Public exploit
root privileges via buffer overflow in ordist command on SGI IRIX systems.
-
High 8.4CVE-1999-0036 Public exploit
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
-
High 8.4CVE-1999-0069 Public exploit
Solaris ufsrestore buffer overflow.