Latest vulnerabilities

931 results · Clear filters · Feed

• High 8.8
  CVE-2014-2817 Exploited EPSS 26%

  Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

  Aug 12, 2014

  KEV May 25, 2022
• High 8.1
  CVE-2014-3120 Exploited Public exploit Scanner template EPSS 89%

  Elasticsearch Improper Access Control vulnerability

  The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…

  org.elasticsearch:elasticsearch Maven
  Jul 28, 2014

  KEV Mar 25, 2022
• High 7.8
  CVE-2014-3153 Exploited Public exploit EPSS 37%

  The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

  linux linux Debian Ubuntu
  Jun 7, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2014-1812 Exploited · Ransomware Public exploit EPSS 65%

  The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind…

  May 14, 2014

  KEV Nov 3, 2021
• High 7.5
  CVE-2014-0130 Exploited Public exploit EPSS 54%

  actionpack Path Traversal vulnerability

  Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows re…

  actionpack RubyGems
  May 7, 2014

  KEV Mar 25, 2022
• High 7.5
  CVE-2014-0160 Exploited Public exploit EPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension pack…

  openssl Debian
  Apr 7, 2014

  KEV May 4, 2022
• High 7.8
  CVE-2014-1761 Exploited Public exploit EPSS 78%

  Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Off…

  Mar 24, 2014

  KEV Feb 15, 2022
• High 8.8
  CVE-2014-0502 Exploited EPSS 25%

  Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windo…

  Feb 21, 2014

  KEV Sep 17, 2024
• High 8.8
  CVE-2014-0322 Exploited Public exploit EPSS 85%

  Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  Feb 14, 2014

  KEV May 4, 2022
• High 8.8
  CVE-2014-0497 Exploited Public exploit EPSS 100%

  Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and M…

  Feb 5, 2014

  KEV Sep 17, 2024
• High 8.8
  CVE-2014-0496 Exploited EPSS 40%

  Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac …

  Jan 15, 2014

  KEV Mar 3, 2022
• High 7.8
  CVE-2013-5065 Exploited Public exploit EPSS 35%

  NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

  Nov 27, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-6282 Exploited Public exploit EPSS 40%

  The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

  linux Debian
  Nov 19, 2013

  KEV Sep 15, 2022
• High 8.8
  CVE-2013-3918 Exploited Public exploit EPSS 74%

  The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Serve…

  Nov 12, 2013

  KEV Oct 6, 2025
• High 7.8
  CVE-2013-3906 Exploited Public exploit EPSS 85%

  GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

  Nov 6, 2013

  KEV Feb 15, 2022
• High 8.8
  CVE-2013-3897 Exploited Public exploit EPSS 77%

  Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

  Oct 9, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-3893 Exploited Public exploit EPSS 88%

  Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throu…

  Sep 18, 2013

  KEV Aug 12, 2025
• High 8.8
  CVE-2013-3346 Exploited Public exploit EPSS 79%

  Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

  Aug 30, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-3163 Exploited Public exploit EPSS 71%

  Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  Jul 10, 2013

  KEV Mar 30, 2023
• High 8.8
  CVE-2013-1690 Exploited Public exploit EPSS 69%

  Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…

  Jun 26, 2013

  KEV Mar 28, 2022
• High 7.8
  CVE-2013-1331 Exploited EPSS 80%

  Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code …

  Jun 12, 2013

  KEV Jun 8, 2022
• High 7.8
  CVE-2013-3660 Exploited Public exploit EPSS 39%

  The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Wind…

  May 24, 2013

  KEV Mar 28, 2022
• High 8.8
  CVE-2013-2729 Exploited Public exploit EPSS 67%

  Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attac…

  May 16, 2013

  KEV Mar 28, 2022
• High 8.4
  CVE-2013-2094 Exploited Public exploit EPSS 48%

  The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data …

  linux kernel Debian Azure Linux
  May 14, 2013

  KEV Sep 15, 2022
• High 8.8
  CVE-2013-1347 Exploited Public exploit EPSS 78%

  Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  May 5, 2013

  KEV Mar 3, 2022
• High 7.8
  CVE-2013-2596 Exploited Public exploit

  Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

  linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
  Apr 13, 2013

  KEV Sep 15, 2022
• High 7.8
  CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

  Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

  Mar 13, 2013

  KEV May 25, 2022
• High 8.8
  CVE-2013-2551 Exploited · Ransomware Public exploit EPSS 74%

  Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  Mar 11, 2013

  KEV Mar 28, 2022
• High 8.8
  CVE-2013-0648 Exploited EPSS 11%

  Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 …

  Feb 27, 2013

  KEV Sep 17, 2024
• High 8.8
  CVE-2013-0643 Exploited EPSS 11%

  The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and …

  Feb 27, 2013

  KEV Sep 17, 2024
• High 7.8
  CVE-2013-0640 Exploited Public exploit EPSS 87%

  Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

  Feb 14, 2013

  KEV Mar 3, 2022
• High 7.8
  CVE-2013-0641 Exploited EPSS 32%

  Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote…

  Feb 14, 2013

  KEV Mar 3, 2022
• High 7.5
  CVE-2013-0629 Exploited Public exploit EPSS 66%

  Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted di…

  Jan 9, 2013

  KEV Mar 7, 2022
• High 7.5
  CVE-2013-0631 Exploited EPSS 66%

  Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exp…

  Jan 9, 2013

  KEV Mar 7, 2022
• High 8.8
  CVE-2012-4792 Exploited Public exploit EPSS 79%

  Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary co…

  Dec 30, 2012

  KEV Jul 23, 2024
• High 7.8
  CVE-2012-2539 Exploited EPSS 53%

  Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office…

  Dec 12, 2012

  KEV Mar 28, 2022
• High 8.8
  CVE-2012-5054 Exploited EPSS 21%

  Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows rem…

  Sep 24, 2012

  KEV Jun 8, 2022
• High 8.1
  CVE-2012-4969 Exploited Public exploit EPSS 80%

  Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…

  Sep 18, 2012

  KEV Jun 8, 2022
• High 7.8
  CVE-2012-1535 Exploited Public exploit EPSS 70%

  Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …

  Aug 15, 2012

  KEV Mar 3, 2022
• High 8.8
  CVE-2012-1856 Exploited EPSS 72%

  The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Compo…

  Aug 15, 2012

  KEV Mar 3, 2022