Latest CVE Feed
-
5.0
MEDIUMCVE-2014-6328
Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability," a different vulnerability than CVE-2014-6365.... Read more
Affected Products : internet_explorer- Published: Dec. 11, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-6327
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-6329... Read more
Affected Products : internet_explorer- Published: Dec. 11, 2014
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2014-6326
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6... Read more
Affected Products : exchange_server- Published: Dec. 11, 2014
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2014-6325
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6... Read more
Affected Products : exchange_server- Published: Dec. 11, 2014
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2014-6319
Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka "O... Read more
Affected Products : exchange_server- Published: Dec. 11, 2014
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2014-9166
Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.... Read more
Affected Products : coldfusion- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-9165
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-8455.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-9164
Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-9163
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in De... Read more
- Actively Exploited
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-9162
Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-9159
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-8460.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-9158
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8461
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8460
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-9159.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8459
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8458
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8457
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8460 and CVE-2014-9159.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8456
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8455
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-9165.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-8454
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8455 and CVE-2014-9165.... Read more
- Published: Dec. 10, 2014
- Modified: Apr. 12, 2025