Search vulnerabilities

Results 425,713

CVE-2010-2711

Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify MagCloud application data via unknown vectors.

CVSS 2.0 · 6.4 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2013-0609

acroread: multiple code execution flaws (APSB13-02)

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0613.

CVSS 2.0 · 10.0 Critical EPSS 6.7% KEV · Not listed
Vendors
CVE-2010-2719

SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2013-0612

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0615, CVE-2013-0617, and CVE-2013-0621.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed
Vendors
CVE-2013-0613

acroread: multiple code execution flaws (APSB13-02)

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0609.

CVSS 2.0 · 10.0 Critical EPSS 10.0% KEV · Not listed
Vendors
CVE-2013-0615

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0617, and CVE-2013-0621.

CVSS 2.0 · 10.0 Critical EPSS 9.6% KEV · Not listed
Vendors
CVE-2013-0617

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0621.

CVSS 2.0 · 10.0 Critical EPSS 9.6% KEV · Not listed
Vendors
CVE-2013-0611

acroread: multiple code execution flaws (APSB13-02)

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0614, and CVE-2013-0618.

CVSS 2.0 · 10.0 Critical EPSS 6.7% KEV · Not listed
Vendors
CVE-2013-0619

acroread: multiple code execution flaws (APSB13-02)

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0620, and CVE-2013-0623.

CVSS 2.0 · 10.0 Critical EPSS 5.3% KEV · Not listed
Vendors
CVE-2010-2724

Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchical_select form.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2013-0621

acroread: multiple code execution flaws (APSB13-02)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0617.

CVSS 2.0 · 10.0 Critical EPSS 7.8% KEV · Not listed
Vendors
CVE-2013-2485

wireshark: Infinite loop in the FCSP dissector (wnpa-sec-2013-20, upstream bug 8359)

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
CVE-2013-0622

acroread: security bypass flaws (APSB13-02)

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-0624.

CVSS 2.0 · 10.0 Critical EPSS 5.7% KEV · Not listed
Vendors
CVE-2010-2728

Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 17.3% KEV · Not listed
Vendors
Products
CVE-2013-0623

acroread: multiple code execution flaws (APSB13-02)

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, and CVE-2013-0620.

CVSS 2.0 · 10.0 Critical EPSS 5.3% KEV · Not listed
Vendors
CVE-2013-0624

acroread: security bypass flaws (APSB13-02)

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-0622.

CVSS 2.0 · 10.0 Critical EPSS 4.6% KEV · Not listed
Vendors
CVE-2010-2730

Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 32.8% KEV · Not listed
Vendors
CVE-2013-0627

acroread: local privilege escalation flaw (APSB13-02)

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows local users to gain privileges via unknown vectors.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
CVE-2010-2731

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended access restrictions and execute ASP files via a crafted request, aka "Directory Authentication Bypass Vulnerability."

CVSS 2.0 · 6.8 Medium EPSS 31.1% KEV · Not listed
Vendors
Products
CVE-2014-0499

flash-plugin: multiple flaws lead to arbitrary code execution (APSB14-07)

Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.

CVSS 2.0 · 7.8 High EPSS 3.7% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products