Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 9.3

    HIGH
    CVE-2009-1857

    Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with... Read more

    Affected Products : acrobat acrobat_reader
    • Published: Jun. 11, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1841

    js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the br... Read more

    Affected Products : firefox thunderbird seamonkey
    • Published: Jun. 12, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1838

    The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary Java... Read more

    Affected Products : firefox thunderbird seamonkey
    • Published: Jun. 12, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1788

    Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via ... Read more

    Affected Products : winamp libsndfile
    • Published: May. 26, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2013-0752

    Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a c... Read more

    • Published: Jan. 13, 2013
    • Modified: Apr. 11, 2025
  • 9.3

    HIGH
    CVE-2009-1566

    Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions.... Read more

    Affected Products : easy_media_creator creator
    • Published: Dec. 03, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1534

    Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code v... Read more

    • Published: Aug. 12, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1394

    Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.... Read more

    Affected Products : windows timbuktu_pro
    • Published: Jun. 26, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-1130

    Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that caus... Read more

    Affected Products : office office_powerpoint
    • Published: May. 12, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-0772

    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerN... Read more

    Affected Products : firefox thunderbird seamonkey
    • Published: Mar. 05, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-0749

    Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted GIF image that causes the reallo... Read more

    • Published: Mar. 02, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-0559

    Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability."... Read more

    • Published: Jun. 10, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-0555

    Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitra... Read more

    • Published: Oct. 14, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-0509

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that... Read more

    Affected Products : acrobat acrobat_reader
    • Published: Jun. 11, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-0200

    Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.... Read more

    Affected Products : openoffice.org
    • Published: Sep. 02, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2009-0196

    Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a J... Read more

    Affected Products : ghostscript
    • Published: Apr. 16, 2009
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-4266

    Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Excel sp... Read more

    • Published: Dec. 10, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-4031

    Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; an... Read more

    • Published: Dec. 10, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-4019

    Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and S... Read more

    • Published: Oct. 15, 2008
    • Modified: Apr. 09, 2025
  • 9.3

    HIGH
    CVE-2008-3520

    Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.... Read more

    Affected Products : jasper
    • Published: Oct. 02, 2008
    • Modified: Apr. 09, 2025
Showing 20 of 293360 Results