Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2013-0422 | not reported | — | Listed | A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system... | — |
| CVE-2013-2423 | not reported | — | Listed | Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity. | — |
| CVE-2013-3896 | not reported | — | Listed | Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sen... | — |
| CVE-2013-3993 | not reported | — | Listed | Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data... | — |
| CVE-2013-7331 | not reported | — | Listed | An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerabil... | — |
| CVE-2014-3153 | not reported | — | Listed | The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows loc... | — |
| CVE-2014-4077 | not reported | — | Listed | Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included... | — |
| CVE-2014-2817 | not reported | — | Listed | Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. | — |
| CVE-2014-0546 | not reported | — | Listed | Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a priv... | — |
| CVE-2014-4123 | not reported | — | Listed | Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. | — |
| CVE-2014-8439 | not reported | — | Listed | Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. | — |
| CVE-2014-4148 | not reported | — | Listed | A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts. | — |
| CVE-2015-1671 | not reported | — | Listed | A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly hand... | — |
| CVE-2015-6175 | not reported | — | Listed | The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application. | — |
| CVE-2015-8651 | not reported | — | Listed | Integer overflow in Adobe Flash Player allows attackers to execute code. | — |
| CVE-2015-4495 | not reported | — | Listed | Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges. | — |
| CVE-2015-1769 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links. | — |
| CVE-2015-2425 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-servi... | — |
| CVE-2015-2360 | not reported | — | Listed | Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). | — |
| CVE-2015-0071 | not reported | — | Listed | Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a craft... | — |