Latest vulnerabilities

214 results · Clear filters · Feed

• Medium 5.5
  CVE-2014-0196 Exploited Public exploit EPSS 20%

  The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver …

  linux linux Debian Ubuntu
  May 7, 2014

  KEV May 12, 2023
• Medium 5.4
  CVE-2014-2120 Exploited EPSS 23%

  Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software a…

  Mar 19, 2014

  KEV Nov 12, 2024
• Medium 6.5
  CVE-2013-7331 Exploited Public exploit EPSS 50%

  The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exis…

  Feb 26, 2014

  KEV May 25, 2022
• Medium 5.5
  CVE-2013-3900 Exploited Public exploit EPSS 45%

  WinVerifyTrust Signature Validation Vulnerability

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Wind…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 11, 2013

  KEV Jan 10, 2022
• Medium 5.4
  CVE-2013-5223 Exploited Public exploit EPSS 51%

  Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated us…

  Nov 15, 2013

  KEV Mar 25, 2022
• Medium 5.5
  CVE-2013-3896 Exploited Public exploit EPSS 67%

  Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…

  Oct 9, 2013

  KEV May 25, 2022
• Medium 6.5
  CVE-2013-1675 Exploited

  Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before…

  May 16, 2013

  KEV Mar 3, 2022
• Medium 4.7
  CVE-2012-0518 Exploited

  Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.…

  Oct 16, 2012

  KEV Mar 28, 2022
• Medium 6.1
  CVE-2012-0767 Exploited

  Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Window…

  Feb 16, 2012

  KEV Jun 8, 2022
• Medium 5.7
  CVE-2011-4723 Exploited

  The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive info…

  Dec 20, 2011

  KEV Sep 8, 2022
• Medium 5.9
  CVE-2010-1428 Exploited · Ransomware Public exploit EPSS 53%

  The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

  Apr 28, 2010

  KEV May 25, 2022
• Medium 6.5
  CVE-2009-3960 Exploited · Ransomware Public exploit EPSS 90%

  Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Servic…

  Feb 15, 2010

  KEV Mar 7, 2022
• Medium 5.9
  CVE-2009-2055 Exploited

  Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE …

  Aug 19, 2009

  KEV Mar 25, 2022
• Medium 5.9
  CVE-2004-1464 Exploited

  Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) con…

  Feb 13, 2005

  KEV May 19, 2023