Attackers can send certain network packets to specific older Cisco devices and cause them to stop forwarding traffic until the devices recover on their own
Published Sep 7, 2017 EPSS 6.2% Act now
Known exploited vulnerabilities
Vulnerabilities CISA has confirmed are being exploited in the wild. These carry remediation deadlines for US federal agencies, and are a reasonable priority order for everyone else.
1533 in the catalogue · showing 1151–1200
Attackers on the same network can crash certain older Cisco routers and switches, causing network outages until the devices are updated or the risky feature is…
Published Aug 7, 2017 EPSS 2.1% Act now
A hidden flaw in the way certain network devices handle remote management requests lets attackers who know the device's secret access code take full control or…
Published Jul 17, 2017 EPSS 70.4% Act now
Attackers who already know a network device's management password can send a specially crafted message that takes over the device or shuts it down, giving them…
Published Jul 17, 2017 EPSS 7.3% Act now
A flaw in Cisco network equipment lets attackers who know a password send a special message that can take over or crash the devices, potentially disrupting the…
Published Jul 17, 2017 EPSS 10.9% Act now
A flaw in the way certain Cisco network devices handle management requests lets attackers who know a shared password take over those devices and potentially…
Published Jul 17, 2017 EPSS 11.1% Act now
A flaw in widely used network equipment software lets attackers who know a basic access password take full control of the device or shut it down remotely
Published Jul 17, 2017 EPSS 10.9% Act now
Attackers who already know a device's SNMP password can send a specially made request that takes over the device or crashes it, giving them full control of the…
Published Jul 17, 2017 EPSS 45.0% Act now
Attackers who know a device's management password can send a specially made network query that takes over or crashes important Cisco network equipment
Published Jul 17, 2017 EPSS 10.9% Act now
A problem in older Microsoft antivirus software could let attackers take over computers simply by getting a specially made file scanned
Published May 26, 2017 EPSS 71.9% Act now
A bug in older Microsoft Office programs lets attackers take over a computer when someone opens a specially made document
Published May 12, 2017 EPSS 78.1% Act now
A flaw in older Windows versions lets an attacker who already has some access on a computer run a bad program that gives them full control of the machine
Published Mar 17, 2017 EPSS 3.1% Act now
A flaw in older versions of Excel lets attackers run harmful programs on a computer if someone opens a specially made spreadsheet file and clicks inside it
Published Dec 20, 2016 EPSS 57.7% Act now
Attackers can remotely change settings on certain older Siemens industrial network modules that should only be changeable by authorized software, potentially…
Published Nov 18, 2016 EPSS 3.6% Act now
A flaw in the Linux operating system lets anyone who already has access to a computer secretly gain full control of it
Published Nov 10, 2016 EPSS 83.5% Act now
A flaw in old Flash software lets attackers take over a computer simply by getting someone to view a malicious web page or file, and attackers have already…
Published Nov 1, 2016 EPSS 25.2% Act now
Older versions of Microsoft Word can be taken over by attackers if someone opens a specially crafted document file
Published Oct 14, 2016 EPSS 57.6% Act now
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016
Published May 11, 2016 EPSS 94.3%
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…
Published Apr 7, 2016 EPSS 22.3%
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…
Published Mar 9, 2016 EPSS 37.0%
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment
Published Oct 22, 2015 EPSS 13.6%
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to…
Published Oct 15, 2015 EPSS 65.3%
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office…
Published Sep 9, 2015 EPSS 85.9%
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory…
Published Aug 15, 2015 EPSS 53.1%
Attackers can take over computers running certain old versions of Java software without needing any login credentials or user interaction
Published Jul 16, 2015 EPSS 25.5% Act now
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
Published Jul 14, 2015 EPSS 34.9%
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote…
Published Jul 14, 2015 EPSS 40.1%
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through…
Published Jul 8, 2015 EPSS 98.6%
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted…
Published Apr 21, 2015 EPSS 55.9%
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
Published Apr 14, 2015 EPSS 73.9%
Older Windows computers could be taken over completely if someone opened a specially crafted document file. CVE-2014-4114 is rated high (CVSS 7.8) and is…
Published Oct 15, 2014 EPSS 81.6% Act now
A bug in widely used PDF software can let attackers take over computers when people open certain documents, risking data loss and system compromise
Published Jan 15, 2014 EPSS 40.0% Act now
Attackers can run a malicious program on very old Windows computers to take complete control of those machines
Published Nov 28, 2013 EPSS 34.7% Act now
A bug in older web browsers lets attackers take over a computer simply by getting someone to visit a harmful webpage
Published Oct 9, 2013 EPSS 77.3% Act now
Older versions of Adobe Acrobat and Reader contain a flaw that lets attackers take over a computer when a user opens a specially made document
Published Aug 30, 2013 EPSS 78.9% Act now
Old versions of Firefox and Thunderbird could accidentally let a malicious website read private information that the browser had stored in memory
Published May 16, 2013 EPSS 6.7% Act now
Old web browsers on unsupported Windows computers contained a flaw that let attackers take over machines simply by tricking users into visiting a malicious…
Published May 5, 2013 EPSS 77.7% Act now
A flaw in widely used PDF software lets attackers take over computers when users open a specially made document, and criminals have already used it in real…
Published Feb 14, 2013 EPSS 32.3% Act now
A problem in PDF viewing software lets attackers take over computers when people open specially made documents
Published Feb 14, 2013 EPSS 86.9% Act now
Attackers could take over certain Adobe ColdFusion servers by logging in with a blank password, giving them full control of the system
Published Jan 17, 2013 EPSS 93.1% Act now
Older Java software on computers contained a flaw that let attackers run any program they wanted without asking permission, and criminals have used it to…
Published Aug 28, 2012 EPSS 98.5% Act now
A long-fixed flaw in an old media player lets attackers take over computers when victims open certain documents, and it was already being used by criminals…
Published Aug 15, 2012 EPSS 70.4% Act now
Old Microsoft software used in documents and databases contains a flaw that lets attackers take over computers when users open specially made files or visit…
Published Aug 15, 2012 EPSS 72.0% Act now
Older versions of Java contain a flaw that lets attackers remotely take over computers, steal information, or install ransomware without any user interaction
Published Jun 16, 2012 EPSS 93.6% Act now
Older versions of Java contain a security hole that lets attackers break built-in protections and take full control of affected computers, including those used…
Published Jun 7, 2012 EPSS 98.2% Act now
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java…
Published Oct 19, 2011 EPSS 96.7%
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code…
Published Jun 16, 2011 EPSS 49.0%
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and…
Published Apr 13, 2011 EPSS 99.4%
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and…
Published Nov 10, 2010 EPSS 89.4%
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash)…
Published Feb 22, 2010 EPSS 88.2%