Priority CRITICAL 97KEV
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document,…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.83219 · Published 2010-01-13 · Fixed CWE-787
Priority CRITICAL 93KEV
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle)…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.63507 · Published 2011-03-15 · Fixed
Priority CRITICAL 93KEV
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.82531 · Published 2010-06-08 · Fixed CWE-787
Priority CRITICAL 93KEV
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code v…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.8188 · Published 2009-12-15 · Fixed CWE-416
Priority MEDIUM 62
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.30946 · Published 2016-03-13 · Fixed
Priority MEDIUM 52
The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative ch…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06723 · Published 2010-05-07 · No fix listed CWE-190
Priority MEDIUM 51
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06418 · Published 2010-11-05 · Fixed CWE-416
Priority MEDIUM 51
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and da…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.19633 · Published 2009-06-09 · Fixed CWE-908
Priority MEDIUM 47
Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a ..
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.12496 · Published 2010-01-09 · Fixed CWE-22
Priority MEDIUM 46
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corrup…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.04692 · Published 2016-04-30 · Fixed CWE-119
Priority MEDIUM 46
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.04692 · Published 2016-04-30 · Fixed CWE-119
Priority MEDIUM 46
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of servic…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.04889 · Published 2016-03-13 · Fixed CWE-119
Priority MEDIUM 45
Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03854 · Published 2016-03-13 · Fixed CWE-119
Priority MEDIUM 45
Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01458 · Published 2016-04-18 · Fixed
Priority MEDIUM 44
Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to t…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02251 · Published 2016-07-23 · Partial fix CWE-416
Priority MEDIUM 44
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buff…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03466 · Published 2016-03-13 · Fixed CWE-119
Priority MEDIUM 43
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02708 · Published 2016-03-13 · Fixed CWE-119
Priority MEDIUM 43
CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified oth…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02708 · Published 2016-03-13 · Fixed CWE-119
Priority MEDIUM 43
The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a den…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02912 · Published 2016-03-13 · Fixed CWE-119
Priority MEDIUM 43
The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or ca…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02973 · Published 2016-03-13 · Fixed CWE-119
Priority MEDIUM 43
Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory co…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02831 · Published 2016-03-13 · Fixed
Priority MEDIUM 43
Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by lev…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0289 · Published 2016-03-13 · Fixed
Priority MEDIUM 43
The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via cr…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02573 · Published 2016-04-18 · Fixed CWE-119
Priority MEDIUM 42
An issue was discovered in aubio 0.4.6.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01975 · Published 2018-07-23 · Fixed in 0.4.7 CWE-125
Priority MEDIUM 42
An issue was discovered in aubio 0.4.6.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01948 · Published 2018-07-23 · Fixed in 0.4.7 CWE-119
Load more