Priority CRITICAL 100KEV
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20055 · Published 2016-06-16 · Fixed
Priority CRITICAL 100KEV
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.94271 · Published 2016-05-11 · Fixed
Priority CRITICAL 100KEV
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1883 · Published 2015-07-14 · Fixed CWE-416
Priority CRITICAL 100KEV
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x thro…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87033 · Published 2015-07-14 · Fixed CWE-416
Priority CRITICAL 100KEV
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 o…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98618 · Published 2015-07-08 · Fixed CWE-416
Priority CRITICAL 100KEV
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99812 · Published 2015-06-23 · Fixed CWE-122
Priority CRITICAL 100KEV
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.95341 · Published 2015-02-02 · No fix listed CWE-416
Priority CRITICAL 100KEV
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via u…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.85589 · Published 2015-01-23 · Fixed
Priority CRITICAL 97KEV
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe A…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.67698 · Published 2015-12-28 · Fixed CWE-190
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority CRITICAL 93KEV
A local privilege escalation vulnerability was found on polkit's pkexec utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.94921 · Published 2022-01-28 · Fixed CWE-787
Priority CRITICAL 93KEV
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.65339 · Published 2015-10-15 · Fixed
Priority HIGH 82KEV
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.7565 · Published 2016-05-05 · Partial fix CWE-918
Priority HIGH 82KEV
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.75307 · Published 2016-05-05 · Partial fix CWE-552
Priority HIGH 74
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or poss…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.52841 · Published 2018-01-03 · Partial fix CWE-416
Priority HIGH 73
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.49982 · Published 2016-06-10 · Partial fix
Priority MEDIUM 63
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.25419 · Published 2016-06-16 · Fixed
Priority MEDIUM 62
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.85784 · Published 2014-06-05 · Fixed CWE-476
Priority MEDIUM 62
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS he…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.87892 · Published 2014-06-05 · Partial fix
Priority MEDIUM 55
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.16385 · Published 2016-06-16 · Fixed
Priority MEDIUM 55
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.16385 · Published 2016-06-16 · Fixed
Priority MEDIUM 55
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.16544 · Published 2016-06-16 · Fixed
Priority MEDIUM 52
The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, w…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06098 · Published 2014-06-11 · No fix listed CWE-119
Priority MEDIUM 52
Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly execute arbi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06776 · Published 2014-06-11 · No fix listed CWE-189
Priority MEDIUM 48
The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to c…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.4031 · Published 2014-05-06 · Fixed CWE-476
Load more