Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Microsoft Windows Remote Code Execution VulnerabilityVuln · CVE-2014-4148 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 59.85%Oct 14, 2014
Critical9.8Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityVuln · CVE-2014-6287 · Rejetto · HTTP File Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.32%Oct 7, 2014
High7.8Microsoft Graphics Component Memory Corruption VulnerabilityVuln · CVE-2013-3906 · Microsoft · Graphics Component · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 84.85%Nov 6, 2013
Critical9.8HP Multiple Products Remote Code Execution VulnerabilityVuln · CVE-2013-4810 · Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 79.47%Sep 13, 2013
High8.8Microsoft Internet Explorer Memory Corruption VulnerabilityVuln · CVE-2013-3163 · Microsoft · Internet Explorer · CISA KEV · CVE.org · FIRST EPSS · Internet Explorer, MicrosoftPatch nowKEVEPSS 70.68%Jul 9, 2013
High8.8Microsoft Internet Explorer Remote Code Execution VulnerabilityVuln · CVE-2013-1347 · Microsoft · Internet Explorer · CISA KEV · CVE.org · FIRST EPSS · Internet Explorer, MicrosoftPatch nowKEVEPSS 77.74%May 5, 2013
High7.8Adobe Flash Player Arbitrary Code Execution VulnerabilityVuln · CVE-2012-1535 · Adobe · Flash Player · CISA KEV · CVE.org · FIRST EPSS · Adobe, FlashPatch nowKEVEPSS 70.38%Aug 15, 2012
High8.8Microsoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityVuln · CVE-2012-1856 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 72.03%Aug 14, 2012
Critical9.8Apache Struts 2 Improper Input Validation VulnerabilityVuln · CVE-2012-0391 · Apache · Struts 2 · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 75.60%Jan 8, 2012
High8.8Microsoft MSCOMCTL.OCX Remote Code Execution VulnerabilityVuln · CVE-2012-0158 · Microsoft · MSCOMCTL.OCX · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 99.98%Jan 1, 2012
High7.8Adobe Reader and Acrobat Arbitrary Code Execution VulnerabilityVuln · CVE-2010-0188 · Adobe · Acrobat and Reader · CISA KEV · CVE.org · FIRST EPSS · Acrobat, AdobePatch nowKEVEPSS 88.25%Feb 21, 2010
High7.8Microsoft Excel Featheader Record Memory Corruption VulnerabilityVuln · CVE-2009-3129 · Microsoft · Excel · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 84.03%Nov 11, 2009
High7.8Adobe Acrobat and Reader, Flash Player Unspecified VulnerabilityVuln · CVE-2009-1862 · Adobe · Acrobat and Reader, Flash Player · CISA KEV · CVE.org · FIRST EPSS · Acrobat, AdobePatch nowKEVEPSS 21.20%Jul 23, 2009
High7.8Microsoft Office Object Record Corruption VulnerabilityVuln · CVE-2009-0557 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 53.00%Jun 10, 2009
High8.8Microsoft Office PowerPoint Code Injection VulnerabilityVuln · CVE-2009-0556 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 67.31%Apr 3, 2009
Critical9.8phpMyAdmin Remote Code Execution VulnerabilityVuln · CVE-2009-1151 · phpMyAdmin · phpMyAdmin · CISA KEV · CVE.org · FIRST EPSS · phpMyAdminPatch nowKEVEPSS 96.56%Mar 26, 2009
High8.8Microsoft Office Remote Code ExecutionVuln · CVE-2009-0238 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 42.94%Feb 25, 2009
Critical9.8Microsoft Windows Buffer Overflow VulnerabilityVuln · CVE-2008-4250 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 98.75%Oct 23, 2008
Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTIO…Vuln · CVE-2005-0709 · Oracle · mysql · CVE.org · FIRST EPSS · Oracle Critical Patch Updates · MySQLCheck this weekEPSS 18.44%May 2, 2005