Browse CVEs

HIGH 8.8 CVE-2010-0249 KEVEPSS 92% Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; … Internet Explorer Patch available Fix from $1,9502010-01-15 HIGH 8.8 CVE-2009-3953 KEVEPSS 84% The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attacke… Acrobat 7.1.4 / 8.2+ Fix from $1,9502010-01-13 HIGH 7.8 CVE-2009-4324 KEVEPSS 82% Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Wi… Acrobat 8.2 / 9.3+ Fix from $1,9502009-12-15 HIGH 7.8 CVE-2009-3129 KEVEPSS 86% Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel V… Excel Patch available Fix from $1,9502009-11-11 HIGH 8.8 CVE-2009-3459 KEVEPSS 87% Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbi… Acrobat 7.1.4 / 8.1.7+ Fix from $1,9502009-10-13 MEDIUM 5.9 CVE-2009-2055 KEV Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attrib… Ios Xr Patch available Fix from $1,6002009-08-19 HIGH 7.8 CVE-2009-1862 KEVEPSS 25% Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, al… Acrobat after 10.0.22.87 Fix from $1,9502009-07-23 HIGH 8.8 CVE-2008-0015 KEVEPSS 77% Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX… Windows 2003 Server Mitigation only Fix from $1,9502009-07-07 HIGH 7.8 CVE-2009-1123 KEV The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate c… Windows 2000 Patch available Fix from $1,9502009-06-10 HIGH 7.8 CVE-2009-0557 KEVEPSS 59% Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and S… Office Patch available Fix from $1,9502009-06-10 HIGH 7.8 CVE-2009-0563 KEVEPSS 63% Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File … Office Patch available Fix from $1,9502009-06-10 HIGH 8.8 CVE-2009-1537 KEVEPSS 51% Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4,… Directx Patch available Fix from $1,9502009-05-29 HIGH 8.8 CVE-2009-0556 KEVEPSS 68% Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arb… Office Powerpoint Patch available Fix from $1,9502009-04-03 CRITICAL 9.8 CVE-2009-1151 KEVEPSS 95% Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitr… Debian Linux 2.11.9.5 / 3.1.3.1+ Fix from $2,3002009-03-26 HIGH 8.8 CVE-2009-0927 KEVEPSS 97% Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute ar… Acrobat Reader 7.1.1 / 8.1.3+ Fix from $1,9502009-03-19 HIGH 8.8 CVE-2009-0238 KEVEPSS 43% Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, … Excel Mitigation only Fix from $1,9502009-02-25 HIGH 7.8 CVE-2008-2992 KEVEPSS 98% Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls… Acrobat after 8.1.2 Fix from $1,9502008-11-04 CRITICAL 9.8 CVE-2008-4250 KEVEPSS 99% The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows rem… Windows 2000 Patch available Fix from $2,3002008-10-23 HIGH 8.8 CVE-2008-3431 KEVEPSS 7% The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and doe… Virtualbox 1.6.4+ Fix from $1,9502008-08-05 HIGH 7.8 CVE-2007-5659 KEVEPSS 94% Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arg… Acrobat 8.1.2+ Fix from $1,9502008-02-12 HIGH 8.8 CVE-2008-0655 KEVEPSS 37% Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. Acrobat 8.1.2+ Fix from $1,9502008-02-07 CRITICAL 9.8 CVE-2007-3010 KEVEPSS 97% masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbi… Omnipcx Enterprise Communication Server after 7.1 Fix from $2,3002007-09-18 HIGH 8.8 CVE-2007-0671 KEVEPSS 42% Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attack… Access Mitigation only Fix from $1,9502007-02-03 HIGH 8.8 CVE-2006-2492 KEVEPSS 48% Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-as… Office after 2006 Fix from $1,9502006-05-20 HIGH 7.5 CVE-2006-1547 KEVEPSS 55% ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a mult… Struts 1.2.9+ Fix from $1,9502006-03-30 CRITICAL 9.8 CVE-2005-2773 KEVEPSS 74% HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node para… Openview Network Node Manager after 7.50 Fix from $2,3002005-09-02 MEDIUM 5.9 CVE-2004-1464 KEV Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP c… iOS after 12.2 Fix from $1,6002004-12-31 HIGH 7.8 CVE-2004-0210 KEVEPSS 7% The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifyi… Interix Patch available Fix from $1,9502004-08-06 HIGH 7.8 CVE-2002-0367 KEV smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows loca… Windows 2000 Patch available Fix from $1,9502002-06-25