Search vulnerabilities

Results 425,103

CVE-2012-0595

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.

CVSS 2.0 · 9.3 Critical EPSS 4.1% KEV · Not listed
Vendors
Products
CVE-2013-0595

Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Ibm
CVE-2013-0603

acroread: multiple code execution flaws (APSB13-02)

Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0604.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed
Vendors
CVE-2013-0597

Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0, when OAuth is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Ibm
CVE-2014-0493

Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0495.

CVSS 2.0 · 10.0 Critical EPSS 5.1% KEV · Not listed
CVE-2010-2710

Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 10.2% KEV · Not listed
Vendors
Hp
CVE-2010-2711

Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify MagCloud application data via unknown vectors.

CVSS 2.0 · 6.4 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2013-0609

acroread: multiple code execution flaws (APSB13-02)

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0613.

CVSS 2.0 · 10.0 Critical EPSS 6.7% KEV · Not listed
Vendors
CVE-2010-2719

SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2013-0612

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0615, CVE-2013-0617, and CVE-2013-0621.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed
Vendors
CVE-2013-0613

acroread: multiple code execution flaws (APSB13-02)

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0609.

CVSS 2.0 · 10.0 Critical EPSS 10.0% KEV · Not listed
Vendors
CVE-2013-0615

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0617, and CVE-2013-0621.

CVSS 2.0 · 10.0 Critical EPSS 9.6% KEV · Not listed
Vendors
CVE-2013-0617

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0621.

CVSS 2.0 · 10.0 Critical EPSS 9.6% KEV · Not listed
Vendors
CVE-2013-0611

acroread: multiple code execution flaws (APSB13-02)

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0614, and CVE-2013-0618.

CVSS 2.0 · 10.0 Critical EPSS 6.7% KEV · Not listed
Vendors
CVE-2013-0619

acroread: multiple code execution flaws (APSB13-02)

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0620, and CVE-2013-0623.

CVSS 2.0 · 10.0 Critical EPSS 5.3% KEV · Not listed
Vendors
CVE-2010-2724

Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchical_select form.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2013-0621

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0617.

CVSS 2.0 · 10.0 Critical EPSS 7.8% KEV · Not listed
Vendors
CVE-2013-2485

wireshark: Infinite loop in the FCSP dissector (wnpa-sec-2013-20, upstream bug 8359)

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed