CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Oracle Java SE JAX-WS Component Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2012-5076)
[Affected Scope] Oracle Java SE 7 Update 7 and earlier versions of the JRE (Java Runtime Environment)
[Impact] Unauthenticated remote attackers can completely compromise system confidentiality, integrity, and availability, leading to Remote Code Execution (RCE)
[Mitigation] Immediately upgrade to Java SE 7 Update 9 or later, and restrict JAX-WS class loading in legacy environments
Microsoft XML Core Services (MSXML) Uninitialized Memory Access Vulnerability (CVE-2012-1889) Technical Analysis and Mitigation Guide
[Affected Scope] Systems running Microsoft XML Core Services (MSXML) versions 3.0, 4.0, 5.0, and 6.0, primarily accessed via Internet Explorer
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) by enticing a user to visit a specially crafted malicious website
[Mitigation] Apply the official Microsoft security update (MS12-043) immediately, or implement ActiveX Kill Bit workarounds to block the execution of vulnerable MSXML components
Adobe Flash Player and AIR Memory Corruption Remote Code Execution Vulnerability (CVE-2012-2034)
[Affected Scope] Legacy versions of Adobe Flash Player and Adobe AIR on Windows, macOS, Linux, and Android
[Impact] Execution of arbitrary code or Denial of Service (DoS) via memory corruption when processing specially crafted Flash content (SWF)
[Mitigation] Upgrade Adobe Flash Player and AIR to the patched versions, or completely uninstall the End-of-Life (EOL) Flash Player from all endpoints
PHP-CGI Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2012-1823)
[Affected Scope] PHP versions before 5.3.12 and 5.4.x before 5.4.2, configured to run as a CGI script (php-cgi)
[Impact] Unauthenticated remote attackers can execute arbitrary code by injecting command-line options via HTTP query strings
[Mitigation] Upgrade to patched PHP versions or configure web server rewrite rules to block malicious query strings
Adobe Flash Player Memory Corruption Remote Code Execution Vulnerability (CVE-2012-0754)
[Affected Scope] Legacy Adobe Flash Player versions 10.x and 11.x on Windows, macOS, Linux, Solaris, and Android
[Impact] Attackers can execute arbitrary code or trigger a Denial of Service (DoS) via memory corruption by leveraging specially crafted Flash content
[Mitigation] Immediately uninstall legacy Flash Player components or restrict execution via browser policies and system-level access controls
Microsoft PowerPoint 95 Document Parsing Buffer Overflow Vulnerability (CVE-2010-2572, MS10-088)
[Affected Scope] Microsoft PowerPoint 2002 SP3 and PowerPoint 2003 SP3
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a crafted PowerPoint 95 document
[Mitigation] Apply the official MS10-088 security update or configure File Block settings via registry to restrict legacy PowerPoint 95 formats
Microsoft Excel Object Record Corruption Remote Code Execution Vulnerability (CVE-2009-0557, MS09-021)
[Affected Scope] Microsoft Office 2000 SP3, XP SP3, 2003 SP3, 2007 SP1/SP2, Office for Mac 2004/2008, Excel Viewer, and Compatibility Pack
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Excel file
[Mitigation] Immediately apply the official Microsoft MS09-021 security update and restrict the execution of untrusted spreadsheet files