Latest vulnerabilities

565 results · Clear filters · Feed

• High 8.8
  CVE-2015-2426 Exploited Public exploit EPSS 87%

  Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …

  Jul 20, 2015

  KEV Mar 28, 2022
• High 8.8
  CVE-2015-2419 Exploited Public exploit EPSS 53%

  JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial …

  Jul 14, 2015

  KEV Mar 28, 2022
• High 7.8
  CVE-2015-5122 Exploited Public exploit EPSS 87%

  Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

  flashplugin-nonfree Ubuntu
  Jul 14, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-5119 Exploited Public exploit EPSS 99%

  Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

  flashplugin-nonfree Ubuntu
  Jul 8, 2015

  KEV Mar 3, 2022
• High 7.8
  CVE-2015-3113 Exploited Public exploit EPSS 100%

  Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows a…

  flashplugin-nonfree Ubuntu
  Jun 23, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-1701 Exploited · Ransomware Public exploit EPSS 56%

  Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local…

  Apr 21, 2015

  KEV Mar 3, 2022
• High 7.5
  CVE-2015-3035 Exploited Public exploit EPSS 84%

  Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before…

  Apr 17, 2015

  KEV Mar 25, 2022
• High 7.8
  CVE-2015-3043 Exploited Public exploit EPSS 74%

  Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

  flashplugin-nonfree Ubuntu
  Apr 14, 2015

  KEV Mar 3, 2022
• High 7.8
  CVE-2015-1641 Exploited Public exploit EPSS 97%

  Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Com…

  Apr 14, 2015

  KEV Nov 3, 2021
• High 7.8
  CVE-2015-1130 Exploited Public exploit

  The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and …

  Apr 10, 2015

  KEV Feb 10, 2022
• High 8.8
  CVE-2015-2051 Exploited Public exploit EPSS 97%

  The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute a…

  Feb 23, 2015

  KEV Feb 10, 2022
• High 7.8
  CVE-2015-0313 Exploited Public exploit EPSS 95%

  Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

  flashplugin-nonfree Ubuntu
  Feb 2, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-0311 Exploited Public exploit EPSS 86%

  Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windo…

  flashplugin-nonfree Ubuntu
  Jan 23, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-0016 Exploited Public exploit EPSS 76%

  Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

  Jan 13, 2015

  KEV May 25, 2022
• High 8.0
  CVE-2014-100005 Exploited Public exploit EPSS 43%

  Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17…

  Jan 13, 2015

  KEV May 16, 2024
• High 8.8
  CVE-2014-6324 Exploited Public exploit EPSS 87%

  The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…

  Nov 18, 2014

  KEV Mar 25, 2022
• High 8.8
  CVE-2014-6332 Exploited Public exploit EPSS 95%

  OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Window…

  Nov 11, 2014

  KEV Mar 25, 2022
• High 7.8
  CVE-2014-6352 Exploited Public exploit EPSS 77%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  Oct 22, 2014

  KEV Feb 25, 2022
• High 7.8
  CVE-2014-4114 Exploited Public exploit EPSS 82%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  Oct 15, 2014

  KEV Mar 3, 2022
• High 7.8
  CVE-2014-4113 Exploited Public exploit EPSS 87%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  Oct 15, 2014

  KEV May 4, 2022
• High 8.8
  CVE-2014-6278 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

  bash bash Debian Ubuntu
  Sep 30, 2014

  KEV Oct 2, 2025
• High 7.8
  CVE-2014-4404 Exploited Public exploit EPSS 49%

  Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbit…

  Sep 18, 2014

  KEV Feb 10, 2022
• High 8.4
  CVE-2013-2597 Exploited Public exploit

  Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.…

  Aug 31, 2014

  KEV Sep 15, 2022
• High 8.1
  CVE-2014-3120 Exploited Public exploit EPSS 89%

  Elasticsearch Improper Access Control vulnerability

  The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…

  org.elasticsearch:elasticsearch Maven
  Jul 28, 2014

  KEV Mar 25, 2022
• High 7.8
  CVE-2014-3153 Exploited Public exploit EPSS 37%

  The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

  linux linux Debian Ubuntu
  Jun 7, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2014-1812 Exploited · Ransomware Public exploit EPSS 65%

  The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind…

  May 14, 2014

  KEV Nov 3, 2021
• High 7.5
  CVE-2014-0130 Exploited Public exploit EPSS 54%

  actionpack Path Traversal vulnerability

  Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows re…

  actionpack RubyGems
  May 7, 2014

  KEV Mar 25, 2022
• High 7.5
  CVE-2014-0160 Exploited Public exploit EPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension pack…

  openssl Debian
  Apr 7, 2014

  KEV May 4, 2022
• High 7.8
  CVE-2014-1761 Exploited Public exploit EPSS 78%

  Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Off…

  Mar 24, 2014

  KEV Feb 15, 2022
• High 8.8
  CVE-2014-0322 Exploited Public exploit EPSS 85%

  Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  Feb 14, 2014

  KEV May 4, 2022
• High 8.8
  CVE-2014-0497 Exploited Public exploit EPSS 100%

  Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and M…

  Feb 5, 2014

  KEV Sep 17, 2024
• High 7.8
  CVE-2013-5065 Exploited Public exploit EPSS 35%

  NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

  Nov 27, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-6282 Exploited Public exploit EPSS 40%

  The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

  linux Debian
  Nov 19, 2013

  KEV Sep 15, 2022
• High 8.8
  CVE-2013-3918 Exploited Public exploit EPSS 74%

  The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Serve…

  Nov 12, 2013

  KEV Oct 6, 2025
• High 7.8
  CVE-2013-3906 Exploited Public exploit EPSS 85%

  GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

  Nov 6, 2013

  KEV Feb 15, 2022
• High 8.8
  CVE-2013-3897 Exploited Public exploit EPSS 77%

  Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

  Oct 9, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-3893 Exploited Public exploit EPSS 88%

  Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throu…

  Sep 18, 2013

  KEV Aug 12, 2025
• High 8.8
  CVE-2013-3346 Exploited Public exploit EPSS 79%

  Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

  Aug 30, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-3163 Exploited Public exploit EPSS 71%

  Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  Jul 10, 2013

  KEV Mar 30, 2023
• High 8.8
  CVE-2013-1690 Exploited Public exploit EPSS 69%

  Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…

  Jun 26, 2013

  KEV Mar 28, 2022