= 9)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2021-44142	125	Exec Code	2022-02-21	2022-02-23	9.0	None	Remote	Low	???	Complete	Complete	Complete
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
2	CVE-2020-25719	362		2022-02-18	2022-10-21	9.0	None	Remote	Low	???	Complete	Complete	Complete
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
3	CVE-2020-3757	843	Exec Code	2020-02-13	2021-09-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
4	CVE-2019-14287	755	Bypass	2019-10-17	2022-04-18	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
5	CVE-2019-8846	416	Exec Code	2020-10-27	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
6	CVE-2019-8844	787	Exec Code Mem. Corr.	2020-10-27	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
7	CVE-2019-8835	787	Exec Code Mem. Corr.	2020-10-27	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
8	CVE-2019-8816	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
9	CVE-2019-8815	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
10	CVE-2019-8814	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
11	CVE-2019-8689	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
12	CVE-2019-8688	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
13	CVE-2019-8684	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
14	CVE-2019-8676	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
15	CVE-2019-8672	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
16	CVE-2019-8669	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
17	CVE-2019-8544	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
18	CVE-2019-8536	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
19	CVE-2019-8535	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
20	CVE-2019-8506	843	Exec Code	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
21	CVE-2019-7837	416	Exec Code	2019-05-22	2019-05-23	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
22	CVE-2019-3855	787	Exec Code Overflow	2019-03-21	2020-10-15	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
23	CVE-2018-16863	184	Exec Code Bypass	2018-12-03	2023-02-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.
24	CVE-2018-16509		Exec Code	2018-09-05	2019-10-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.
25	CVE-2018-15982	416	Exec Code	2019-01-18	2019-01-29	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
26	CVE-2018-15981	704	Exec Code	2018-11-29	2018-12-28	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
27	CVE-2018-14649	77	Exec Code	2018-10-09	2023-02-13	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=True in file /usr/bin/rbd-target-api provided by ceph-isci-cli package. This allows unauthenticated attackers to access this debug shell and escalate privileges. Once an attacker has successfully connected to this debug shell they will be able to execute arbitrary commands remotely. These commands will run with the same privileges as of user executing the application which is using python-werkzeug with debug shell mode enabled. In - Red Hat Ceph Storage 2 and 3, ceph-isci-cli package runs python-werkzeug library with root level permissions.
28	CVE-2018-10897	59	Dir. Trav.	2018-08-01	2023-02-13	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.
29	CVE-2018-6140	20	Exec Code	2019-01-09	2019-01-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
30	CVE-2018-5002	787	Exec Code Overflow	2018-07-09	2020-08-24	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
31	CVE-2018-4944	704	Exec Code	2018-05-19	2021-09-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
32	CVE-2018-4877	416	Exec Code	2018-02-06	2021-09-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution.
33	CVE-2017-1000116	78		2017-10-05	2019-10-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
34	CVE-2017-18017	416	DoS Mem. Corr.	2018-01-03	2023-01-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
35	CVE-2017-17405	78	Exec Code	2017-12-15	2019-09-19	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "\|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.
36	CVE-2017-16997	426	+Priv	2017-12-18	2020-10-15	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
37	CVE-2017-15399	416		2018-08-28	2018-11-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
38	CVE-2017-11225	416	Exec Code Mem. Corr. +Info	2017-12-09	2021-09-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
39	CVE-2017-11215	416	Exec Code Mem. Corr. +Info	2017-12-09	2021-09-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
40	CVE-2017-11213	125	Overflow	2017-12-09	2021-09-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized transparent or opaque bitmap image. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
41	CVE-2017-9462	732	Exec Code	2017-06-06	2020-02-05	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.
42	CVE-2017-7826	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5.
43	CVE-2017-7810	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
44	CVE-2017-7779	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
45	CVE-2017-5398	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.
46	CVE-2017-3114	125		2017-12-09	2021-09-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
47	CVE-2017-3112	125		2017-12-09	2021-09-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
48	CVE-2017-3106	704	Exec Code	2017-08-11	2022-11-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
49	CVE-2017-3074	787	Exec Code Mem. Corr.	2017-05-09	2023-01-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution.
50	CVE-2017-3073	416	Exec Code Mem. Corr.	2017-05-09	2023-01-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution.

Total number of vulnerabilities : 216 Page : 1 (This Page)2 3 4 5