Priority HIGH 74
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM cre…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.59136 · Published 2008-11-12 · No fix listed CWE-287
Priority HIGH 72
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.52886 · Published 2008-09-10 · No fix listed CWE-189
Priority MEDIUM 64
Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code v…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.2482 · Published 2015-10-21 · No fix listed CWE-22
Priority MEDIUM 64
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.2547 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 64
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.31037 · Published 2008-09-10 · No fix listed CWE-119
Priority MEDIUM 60
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan h…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.23504 · Published 2010-08-27 · No fix listed
Priority MEDIUM 59
Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is loc…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20766 · Published 2010-08-27 · No fix listed
Priority MEDIUM 58
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.30794 · Published 2021-08-12 · Fixed in 10.0.10240.19060, 10.0.14393.4651 +9
Priority MEDIUM 58
Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.13637 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 58
Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.14426 · Published 2014-12-10 · No fix listed CWE-189
Priority MEDIUM 58
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initializa…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.73327 · Published 2011-09-06 · Partial fix CWE-326
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12127 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12127 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.1231 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 57
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CV…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12769 · Published 2014-12-10 · No fix listed CWE-119
Priority MEDIUM 56
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality, integrity, and availabi…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.17913 · Published 2015-10-21 · No fix listed
Priority MEDIUM 56
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.11156 · Published 2015-05-13 · No fix listed CWE-416
Priority MEDIUM 56
Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10734 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 55
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09304 · Published 2015-05-13 · No fix listed CWE-416
Load more