CISA Known Exploited Vulnerabilities catalog (page 11)
Page 11 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 11 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2020-3837 | Apple iOS +6 | High 7.8 | — | 0 | — | 0.148 (96.7th percentile) | A memory corruption issue was addressed with improved memory handling. | ||
CVE-2019-8605 | Apple iOS +5 | High 7.8 | — | 1 | — | 0.176 (97.2th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2018-4344 | Apple Iphone OS +4 | High 7.8 | — | 0 | — | 0.024 (84.0th percentile) | A memory corruption issue was addressed with improved memory handling. | ||
CVE-2022-30190 | Microsoft Windows 10 1507 +37 | High 7.8 | Known | 114 | Yes | 0.992 (99.9th percentile) | A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. | ||
CVE-2021-38163 | SAP Netweaver +1 | Critical 9.9 | — | 2 | — | 0.369 (98.5th percentile) | SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and tr… | ||
CVE-2016-2388 | — | Medium 5.3 | — | 0 | — | 0.522 (99.0th percentile) | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846. | ||
CVE-2016-2386 | — | Critical 9.8 | — | 1 | — | 0.715 (99.4th percentile) | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2101079. | ||
CVE-2019-7195 | QNAP Nas Devices Running Photo Station +1 | Critical 9.8 | Known | 0 | Yes | 0.893 (99.8th percentile) | This external control of file name or path vulnerability allows remote attackers to access or modify system files. | ||
CVE-2019-7194 | QNAP Nas Devices Running Photo Station +1 | Critical 9.8 | Known | 0 | Yes | 0.827 (99.7th percentile) | This external control of file name or path vulnerability allows remote attackers to access or modify system files. | ||
CVE-2019-7193 | QNAP Nas Devices +1 | Critical 9.8 | Known | 0 | — | 0.144 (96.6th percentile) | This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. | ||
CVE-2019-7192 | QNAP Nas Devices Running Photo Station +1 | Critical 9.8 | Known | 2 | Yes | 0.881 (99.8th percentile) | This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. | ||
CVE-2019-5825 | Google Chrome | Medium 6.5 | — | 1 | Yes | 0.559 (99.1th percentile) | Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2019-15271 | Cisco Cisco Small Business Rv Series Router Firmware +4 | High 8.8 | — | 0 | — | 0.055 (92.8th percentile) | A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privilege… | ||
CVE-2018-6065 | Debian Debian Linux +5 | High 8.8 | — | 1 | — | 0.603 (99.1th percentile) | Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit he… | ||
CVE-2018-4990 | Adobe Acrobat Dc +2 | High 8.8 | — | 0 | — | 0.358 (98.5th percentile) | Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. | ||
CVE-2018-17480 | Debian Debian Linux +4 | High 8.8 | — | 0 | — | 0.356 (98.5th percentile) | Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code i… | ||
CVE-2018-17463 | Debian Debian Linux +4 | High 8.8 | — | 3 | Yes | 0.846 (99.7th percentile) | Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. | ||
CVE-2017-6862 | NETGEAR All Versions Prior To Wnr2000v3 1.1.2.14, Wnr2000v4 1.0.0.66, Wnr2000v5 1.0.0.42 +1 | Critical 9.8 | — | 0 | — | 0.457 (98.8th percentile) | NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that us… | ||
CVE-2017-5070 | Google Chrome +4 | High 8.8 | — | 0 | — | 0.321 (98.3th percentile) | Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a craft… | ||
CVE-2017-5030 | Debian Debian Linux +5 | High 8.8 | — | 0 | — | 0.406 (98.7th percentile) | Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a… | ||
CVE-2016-5198 | Google Chrome +4 | High 8.8 | — | 0 | — | 0.342 (98.4th percentile) | V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to… | ||
CVE-2016-1646 | Canonical Ubuntu Linux +10 | High 8.8 | — | 0 | — | 0.481 (98.9th percentile) | The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to c… | ||
CVE-2013-1331 | Microsoft Office +1 | High 7.8 | — | 0 | — | 0.798 (99.6th percentile) | Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocatio… | ||
CVE-2012-5054 | Adobe Flash Player +1 | High 8.8 | — | 0 | — | 0.212 (97.6th percentile) | Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments. | ||
CVE-2012-4969 | Microsoft Internet Explorer +1 | High 8.1 | — | 0 | Yes | 0.802 (99.6th percentile) | Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as expl… | ||
CVE-2012-1889 | Microsoft XML Core Services +1 | High 8.8 | — | 2 | Yes | 0.835 (99.7th percentile) | Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi… | ||
CVE-2012-0767 | Adobe Flash Player +1 | Medium 6.1 | — | 0 | — | 0.062 (93.6th percentile) | Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and b… | ||
CVE-2012-0754 | Adobe Flash Player +1 | High 8.1 | — | 1 | Yes | 0.912 (99.8th percentile) | Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attac… | ||
CVE-2012-0151 | Microsoft Windows 7 +5 | High 7.8 | — | 0 | — | 0.877 (99.8th percentile) | The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and… | ||
CVE-2011-2462 | Adobe Acrobat +2 | Critical 9.8 | — | 0 | Yes | 0.886 (99.8th percentile) | Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute a… | ||
CVE-2011-0609 | Adobe Acrobat +7 | High 7.8 | — | 0 | Yes | 0.635 (99.2th percentile) | Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (ak… | ||
CVE-2010-2883 | Adobe Acrobat +2 | High 7.3 | — | 1 | Yes | 0.814 (99.6th percentile) | Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a deni… | ||
CVE-2010-2572 | Microsoft Powerpoint +1 | High 7.8 | — | 0 | — | 0.586 (99.1th percentile) | Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerabi… | ||
CVE-2010-1297 | Adobe Acrobat +5 | High 7.8 | — | 0 | Yes | 0.825 (99.7th percentile) | Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote… | ||
CVE-2009-4324 | Adobe Acrobat +5 | High 7.8 | — | 0 | Yes | 0.819 (99.7th percentile) | Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to exe… | ||
CVE-2009-3953 | Adobe Acrobat +4 | High 8.8 | — | 0 | Yes | 0.832 (99.7th percentile) | The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D dat… | ||
CVE-2009-1862 | Adobe Acrobat +3 | High 7.8 | — | 0 | — | 0.212 (97.6th percentile) | Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or… | ||
CVE-2009-0563 | Microsoft Office +4 | High 7.8 | — | 0 | — | 0.596 (99.1th percentile) | Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Vi… | ||
CVE-2009-0557 | Microsoft Office +5 | High 7.8 | — | 0 | — | 0.528 (99.0th percentile) | Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Micros… | ||
CVE-2008-0655 | Adobe Acrobat +2 | High 8.8 | — | 0 | — | 0.379 (98.6th percentile) | Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. | ||
CVE-2007-5659 | Adobe Acrobat +2 | High 7.8 | — | 0 | Yes | 0.873 (99.8th percentile) | Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. | ||
CVE-2006-2492 | Microsoft Office +2 | High 8.8 | — | 0 | — | 0.481 (98.9th percentile) | Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a m… | ||
CVE-2022-26134 | Atlassian Confluence Data Center +3 | Critical 9.8 | Known | 98 | Yes | 1.000 (100.0th percentile) | In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data… | ||
CVE-2019-3010 | Oracle Solaris +1 | High 8.8 | — | 1 | Yes | 0.135 (96.5th percentile) | Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). | ||
CVE-2016-7256 | Microsoft Windows 10 1507 +10 | High 8.8 | — | 0 | — | 0.646 (99.2th percentile) | atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold… | ||
CVE-2016-3393 | Microsoft Windows 10 1507 +9 | High 7.8 | — | 0 | — | 0.685 (99.3th percentile) | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Window… | ||
CVE-2016-1010 | Adobe Air +7 | High 8.8 | — | 0 | — | 0.193 (97.4th percentile) | Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK befor… | ||
CVE-2016-0984 | Adobe Air Desktop Runtime +5 | High 8.8 | — | 0 | — | 0.545 (99.0th percentile) | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR S… | ||
CVE-2016-0034 | Microsoft Silverlight +1 | High 8.8 | Known | 1 | — | 0.694 (99.4th percentile) | Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption)… | ||
CVE-2015-8651 | Adobe Air +17 | High 8.8 | — | 1 | — | 0.677 (99.3th percentile) | Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20… | ||
CVE-2015-6175 | Microsoft Windows 10 1507 +1 | High 7.8 | — | 0 | — | 0.053 (92.7th percentile) | The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability." | ||
CVE-2015-4495 | Canonical Ubuntu Linux +15 | High 8.8 | — | 1 | Yes | 0.686 (99.3th percentile) | The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain p… | ||
CVE-2015-2425 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.447 (98.8th percentile) | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln… | ||
CVE-2015-2360 | Microsoft Windows 7 +9 | High 8.8 | — | 0 | — | 0.148 (96.7th percentile) | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201… | ||
CVE-2015-1769 | Microsoft Windows 10 +9 | Medium 6.6 | — | 1 | — | 0.041 (90.8th percentile) | Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 misha… | ||
CVE-2015-1671 | Microsoft Live Meeting +4 | High 7.8 | — | 0 | — | 0.488 (98.9th percentile) | The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Atten… | ||
CVE-2015-0310 | Adobe Flash Player +1 | High 7.8 | — | 0 | — | 0.151 (96.8th percentile) | Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allow… | ||
CVE-2015-0071 | Microsoft Internet Explorer +1 | Medium 6.5 | — | 0 | — | 0.336 (98.4th percentile) | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability." | ||
CVE-2015-0016 | Microsoft Windows 7 +8 | High 7.8 | — | 0 | Yes | 0.758 (99.5th percentile) | Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go… | ||
CVE-2014-8439 | Adobe Air +4 | High 8.8 | — | 0 | — | 0.204 (97.5th percentile) | Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe… | ||
CVE-2014-4148 | Microsoft Windows 7 +9 | High 8.8 | — | 0 | — | 0.599 (99.1th percentile) | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… | ||
CVE-2014-4123 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.471 (98.8th percentile) | Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in O… | ||
CVE-2014-4077 | Microsoft Office 2007 Ime +5 | High 7.8 | — | 0 | — | 0.546 (99.0th percentile) | Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attack… | ||
CVE-2014-3153 | Canonical Ubuntu Linux +9 | High 7.8 | — | 10 | Yes | 0.372 (98.5th percentile) | The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafte… | ||
CVE-2014-2817 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.263 (98.0th percentile) | Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." | ||
CVE-2014-0546 | Adobe Acrobat +2 | Critical 9.8 | — | 0 | — | 0.223 (97.7th percentile) | Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context… | ||
CVE-2013-7331 | Microsoft Internet Explorer +1 | Medium 6.5 | — | 0 | Yes | 0.502 (98.9th percentile) | The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet… | ||
CVE-2013-3993 | IBM Infosphere Biginsights +1 | Medium 6.5 | Known | 0 | — | 0.048 (92.0th percentile) | IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified… | ||
CVE-2013-3896 | Microsoft Silverlight +1 | Medium 5.5 | — | 0 | Yes | 0.671 (99.3th percentile) | Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silve… | ||
CVE-2013-2423 | Canonical Ubuntu Linux +3 | Low 3.7 | — | 0 | Yes | 0.852 (99.7th percentile) | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors rel… | ||
CVE-2013-0431 | — | Low 3.7 | Known | 0 | Yes | 0.901 (99.8th percentile) | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandb… | ||
CVE-2013-0422 | Canonical Ubuntu Linux +4 | Critical 9.8 | Known | 0 | Yes | 0.971 (99.9th percentile) | Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a… | ||
CVE-2013-0074 | Microsoft Silverlight +1 | High 7.8 | Known | 0 | Yes | 0.789 (99.6th percentile) | Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a cr… | ||
CVE-2012-1710 | — | Critical 9.8 | Known | 0 | — | 0.078 (94.7th percentile) | Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via u… | ||
CVE-2010-1428 | — | High 7.5 | Known | 0 | Yes | 0.527 (99.0th percentile) | The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for… | ||
CVE-2010-0840 | Canonical Ubuntu Linux +3 | Critical 9.8 | — | 0 | Yes | 0.963 (99.9th percentile) | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality… | ||
CVE-2010-0738 | — | Medium 5.3 | Known | 2 | Yes | 0.738 (99.5th percentile) | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for t… | ||
CVE-2018-8611 | Microsoft Windows 10 +22 | High 7.8 | — | 2 | — | 0.042 (91.0th percentile) | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, W… | ||
CVE-2018-19953 | QNAP Qts +1 | Medium 6.1 | Known | 0 | — | 0.305 (98.3th percentile) | If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. | ||
CVE-2018-19949 | QNAP Qts +1 | Critical 9.8 | Known | 0 | — | 0.302 (98.2th percentile) | If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. | ||
CVE-2018-19943 | QNAP Qts +1 | High 8.0 | Known | 0 | — | 0.227 (97.7th percentile) | If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. | ||
CVE-2017-8543 | Microsoft Windows 10 1507 +10 | Critical 9.8 | — | 1 | — | 0.742 (99.5th percentile) | Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012… | ||
CVE-2017-8291 | Artifex Ghostscript +8 | High 7.8 | — | 4 | Yes | 0.970 (99.9th percentile) | Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an in… | ||
CVE-2017-18362 | Connectwise Manageditsync +1 | Critical 9.8 | Known | 1 | — | 0.868 (99.7th percentile) | ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. | ||
CVE-2017-0210 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.223 (97.7th percentile) | An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject i… | ||
CVE-2017-0149 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.285 (98.1th percentile) | Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrup… | ||
CVE-2017-0147 | Microsoft Windows 10 1507 +18 | High 7.5 | Known | 1 | Yes | 0.997 (100.0th percentile) | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607… | ||
CVE-2017-0022 | Microsoft Windows 8.1 +4 | Medium 6.5 | — | 0 | — | 0.181 (97.2th percentile) | Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server… | ||
CVE-2017-0005 | Microsoft Windows 10 1507 +10 | High 7.8 | — | 1 | — | 0.110 (95.9th percentile) | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… | ||
CVE-2016-6367 | Cisco Adaptive Security Appliance Software +1 | High 7.8 | — | 0 | — | 0.226 (97.7th percentile) | Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or… | ||
CVE-2016-6366 | Cisco Adaptive Security Appliance Software +3 | High 8.8 | — | 1 | Yes | 0.876 (99.8th percentile) | Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM de… | ||
CVE-2016-4657 | Apple Iphone OS +1 | High 8.8 | — | 4 | Yes | 0.668 (99.3th percentile) | WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. | ||
CVE-2016-4656 | Apple Iphone OS +1 | High 7.8 | — | 0 | Yes | 0.236 (97.8th percentile) | The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. | ||
CVE-2016-4655 | Apple Iphone OS +1 | Medium 5.5 | — | 3 | Yes | 0.334 (98.4th percentile) | The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. | ||
CVE-2016-3351 | Microsoft Edge +2 | Medium 6.5 | Known | 0 | — | 0.265 (98.0th percentile) | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." | ||
CVE-2016-3298 | Microsoft Internet Explorer +4 | Medium 6.5 | — | 0 | — | 0.333 (98.4th percentile) | Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence o… | ||
CVE-2016-0162 | Microsoft Internet Explorer +1 | Medium 4.3 | — | 0 | — | 0.219 (97.7th percentile) | Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability." | ||
CVE-2022-20821 | Cisco Cisco iOS Xr Software +1 | Medium 6.5 | — | 0 | — | 0.115 (96.0th percentile) | A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. | ||
CVE-2021-30883 | Apple iOS And Ipados +5 | High 7.8 | — | 0 | — | 0.147 (96.7th percentile) | A memory corruption issue was addressed with improved memory handling. | ||
CVE-2021-1048 | Google Android +1 | High 7.8 | — | 0 | — | 0.011 (64.8th percentile) | In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. |