Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0CVE-2015-3095 is listed by apple.Check if you run itEPSS 5.82%Jul 15, 2015
- Medium5.0CVE-2014-8450 is listed by apple.Check if you run itEPSS 4.64%Jul 15, 2015
- Medium4.3Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information…Check if you run itEPSS 1.70%Jul 6, 2015
- High7.8Apple OS X Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.89%Apr 10, 2015
- Medium6.8Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer ov…Check if you run itEPSS 1.45%Apr 1, 2015
- High7.5Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary…Check if you run itEPSS 5.30%Apr 1, 2015
- High7.2Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4 through 5.4.3.6, 5.5 through 5.5.4.3, 6.1 through 6.1.5.6, 6.2 before 6.2.5…Check if you run itEPSS 0.40%Feb 22, 2015
- High7.5Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a d…Check if you run itEPSS 2.16%Feb 6, 2015
- High7.5The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X,…Check if you run itEPSS 2.15%Feb 6, 2015
- Medium5.0The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 o…Check if you run itEPSS 1.98%Feb 6, 2015
- High7.5Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, a…Check if you run itEPSS 2.85%Feb 6, 2015
- Critical9.3Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows a…Check if you run itEPSS 7.08%Jan 28, 2015
- Critical9.3Adobe Flash Player Integer Overflow or WraparoundPatch nowKEVEPSS 91.28%Oct 15, 2014
- High8.8Adobe Flash Player Dereferenced Pointer VulnerabilityPatch nowKEVEPSS 20.37%Oct 14, 2014
- High7.8Apple OS X Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 48.92%Sep 18, 2014
- Critical10.0CVE-2014-0566 is listed by apple.Check if you run itEPSS 6.33%Sep 17, 2014
- Critical9.8Adobe Flash Player Integer Underflow VulnerablityPatch nowKEVEPSS 99.88%Feb 4, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows r…Check if you run itEPSS 1.93%Jan 26, 2014
- Medium6.8expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote…Check this weekEPSS 19.43%Jan 21, 2014
- Critical10.0Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linu…Check if you run itEPSS 8.46%Mar 11, 2013
- Medium5.0Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.…Check if you run itEPSS 1.51%Feb 23, 2013
- High7.5Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome befo…Check if you run itEPSS 1.70%Feb 23, 2013
- Critical9.8Oracle Java SE Sandbox Bypass VulnerabilityPatch nowKEVEPSS 91.25%Oct 16, 2012
- UnknownApple iOS before 4.2.9 and 4.3.x before 4.3.4 IOMobileFrameBuffer Privilege EscalationPatch nowKEVEPSS 0.32%Oct 9, 2012
- Critical9.8Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 98.54%Aug 27, 2012