Vulnerabilities (CVE)
1,704 pages, showing 1–100, ordered by identifier.
- CVE-2002-0367 — Microsoft Windows Privilege Escalation Vulnerability smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other...
- CVE-2004-0210 — Microsoft Windows Privilege Escalation Vulnerability A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user...
- CVE-2004-1464 — Cisco IOS Denial-of-Service Vulnerability Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH),...
- CVE-2005-2773 — HP OpenView Network Node Manager Remote Code Execution Vulnerability HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.
- CVE-2006-1547 — Apache Struts 1 ActionForm Denial-of-Service Vulnerability ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for...
- CVE-2006-2492 — Microsoft Word Malformed Object Pointer Vulnerability Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
- CVE-2007-0671 — Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted...
- CVE-2007-3010 — Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers...
- CVE-2007-5659 — Adobe Acrobat and Reader Buffer Overflow Vulnerability Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a...
- CVE-2008-0015 — Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit...
- CVE-2008-0655 — Adobe Acrobat and Reader Unspecified Vulnerability Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a...
- CVE-2008-2992 — Adobe Reader and Acrobat Input Validation Vulnerability Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to...
- CVE-2008-3431 — Oracle VirtualBox Insufficient Input Validation Vulnerability An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to...
- CVE-2008-4128 — Cisco IOS Cross-Site Request Forgery Vulnerability Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute...
- CVE-2008-4250 — Microsoft Windows Buffer Overflow Vulnerability Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote...
- CVE-2009-0238 — Microsoft Office Remote Code Execution Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete...
- CVE-2009-0556 — Microsoft Office PowerPoint Code Injection Vulnerability Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute...
- CVE-2009-0557 — Microsoft Office Object Record Corruption Vulnerability Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via...
- CVE-2009-0563 — Microsoft Office Buffer Overflow Vulnerability Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word...
- CVE-2009-0927 — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
- CVE-2009-1123 — Microsoft Windows Improper Input Validation Vulnerability The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local...
- CVE-2009-1151 — phpMyAdmin Remote Code Execution Vulnerability Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code...
- CVE-2009-1537 — Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in...
- CVE-2009-1862 — Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
- CVE-2009-2055 — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
- CVE-2009-3129 — Microsoft Excel Featheader Record Memory Corruption Vulnerability Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record...
- CVE-2009-3459 — Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to...
- CVE-2009-3953 — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote...
- CVE-2009-3960 — Adobe BlazeDS Information Disclosure Vulnerability Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information...
- CVE-2009-4324 — Adobe Acrobat and Reader Use-After-Free Vulnerability Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
- CVE-2010-0188 — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly...
- CVE-2010-0232 — Microsoft Windows Kernel Exception Handler Vulnerability The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not...
- CVE-2010-0249 — Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute...
- CVE-2010-0738 — Red Hat JBoss Authentication Bypass Vulnerability The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control...
- CVE-2010-0806 — Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute...
- CVE-2010-0840 — Oracle JRE Unspecified Vulnerability Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to...
- CVE-2010-1297 — Adobe Flash Player Memory Corruption Vulnerability Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause...
- CVE-2010-1428 — Red Hat JBoss Information Disclosure Vulnerability Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it...
- CVE-2010-1871 — Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows...
- CVE-2010-2568 — Microsoft Windows Remote Code Execution Vulnerability Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating...
- CVE-2010-2572 — Microsoft PowerPoint Buffer Overflow Vulnerability Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
- CVE-2010-2861 — Adobe ColdFusion Directory Traversal Vulnerability A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote...
- CVE-2010-2883 — Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute...
- CVE-2010-3035 — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
- CVE-2010-3333 — Microsoft Office Stack-based Buffer Overflow Vulnerability A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows...
- CVE-2010-3765 — Mozilla Multiple Products Remote Code Execution Vulnerability Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This...
- CVE-2010-3904 — Linux Kernel Improper Input Validation Vulnerability Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol...
- CVE-2010-3962 — Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote...
- CVE-2010-4344 — Exim Heap-Based Buffer Overflow Vulnerability Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to...
- CVE-2010-4345 — Exim Privilege Escalation Vulnerability Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an...
- CVE-2010-4398 — Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local...
- CVE-2010-5326 — SAP NetWeaver Remote Code Execution Vulnerability SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote...
- CVE-2010-5330 — Ubiquiti AirOS Command Injection Vulnerability Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.
- CVE-2011-0609 — Adobe Flash Player Unspecified Vulnerability Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause...
- CVE-2011-0611 — Adobe Flash Player Remote Code Execution Vulnerability Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial...
- CVE-2011-1823 — Android OS Privilege Escalation Vulnerability The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker...
- CVE-2011-1889 — Microsoft Forefront TMG Remote Code Execution Vulnerability A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client...
- CVE-2011-2005 — Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to...
- CVE-2011-2462 — Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could...
- CVE-2011-3402 — Microsoft Windows Remote Code Execution Vulnerability Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in...
- CVE-2011-3544 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime...
- CVE-2011-4723 — D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive...
- CVE-2012-0151 — Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate...
- CVE-2012-0158 — Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an...
- CVE-2012-0391 — Apache Struts 2 Improper Input Validation Vulnerability The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation...
- CVE-2012-0507 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an...
- CVE-2012-0518 — Oracle Fusion Middleware Unspecified Vulnerability Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware...
- CVE-2012-0754 — Adobe Flash Player Memory Corruption Vulnerability Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause...
- CVE-2012-0767 — Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
- CVE-2012-1535 — Adobe Flash Player Arbitrary Code Execution Vulnerability Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial...
- CVE-2012-1710 — Oracle Fusion Middleware Unspecified Vulnerability Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows...
- CVE-2012-1723 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers...
- CVE-2012-1823 — PHP-CGI Query String Parameter Vulnerability sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows...
- CVE-2012-1854 — Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow...
- CVE-2012-1856 — Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to...
- CVE-2012-1889 — Microsoft XML Core Services Memory Corruption Vulnerability Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
- CVE-2012-2034 — Adobe Flash Player Memory Corruption Vulnerability Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or...
- CVE-2012-2539 — Microsoft Word Remote Code Execution Vulnerability Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.
- CVE-2012-3152 — Oracle Fusion Middleware Unspecified Vulnerability Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to...
- CVE-2012-4681 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.
- CVE-2012-4792 — Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute...
- CVE-2012-4969 — Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via...
- CVE-2012-5054 — Adobe Flash Player Integer Overflow Vulnerability Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via...
- CVE-2012-5076 — Oracle Java SE Sandbox Bypass Vulnerability The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and...
- CVE-2013-0074 — Microsoft Silverlight Double Dereference Vulnerability Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote...
- CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute...
- CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to...
- CVE-2013-0625 — Adobe ColdFusion Authentication Bypass Vulnerability Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining...
- CVE-2013-0629 — Adobe ColdFusion Directory Traversal Vulnerability Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to...
- CVE-2013-0631 — Adobe ColdFusion Information Disclosure Vulnerability Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a...
- CVE-2013-0632 — Adobe ColdFusion Authentication Bypass Vulnerability An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining...
- CVE-2013-0640 — Adobe Reader and Acrobat Memory Corruption Vulnerability An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform...
- CVE-2013-0641 — Adobe Reader Buffer Overflow Vulnerability A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.
- CVE-2013-0643 — Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a...
- CVE-2013-0648 — Adobe Flash Player Code Execution Vulnerability Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that...
- CVE-2013-1331 — Microsoft Office Buffer Overflow Vulnerability Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted...
- CVE-2013-1347 — Microsoft Internet Explorer Remote Code Execution Vulnerability This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context...
- CVE-2013-1675 — Mozilla Firefox Information Disclosure Vulnerability Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and...
- CVE-2013-1690 — Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading,...
- CVE-2013-2094 — Linux Kernel Privilege Escalation Vulnerability Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of...
Browse by topic
Every page in the corpus, grouped. Search finds one page; this shows what else is here.