EV
Product
Evergreen
On CISA KEVExploited in the wildRansomware-linked
44
CVEs
10
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 8Medium 5Low 1
Watch
Add Evergreen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4117 RansomwareIn wildKEV | 9.8 | May 11 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: 11.4 |
| CVE-2015-5123 In wildKEV | 9.8 | Jul 14 | Adobe Flash Player Use-After-Free Vulnerability Affected: 11.4 |
| CVE-2015-5122 In wildKEV | 9.8 | Jul 14 | Adobe Flash Player Use-After-Free Vulnerability Affected: 11.4 |
| CVE-2015-5119 In wildKEV | 9.8 | Jul 8 | Adobe Flash Player Use-After-Free Vulnerability Affected: 11.4 |
| CVE-2015-3113 In wildKEV | 9.8 | Jun 23 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Affected: 11.4 |
| CVE-2015-3043 In wildKEV | 9.8 | Apr 14 | Adobe Flash Player Memory Corruption Vulnerability Affected: 11.4 |
| CVE-2015-0313 In wildKEV | 9.8 | Feb 2 | Adobe Flash Player Use-After-Free Vulnerability Affected: 11.4 |
| CVE-2015-8651 In wildKEV | 8.8 | Dec 28 | Adobe Flash Player Integer Overflow Vulnerability Affected: 11.4 |
| CVE-2015-7645 RansomwareIn wildKEV | 7.8 | Oct 15 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: 11.4 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 11.4 |
| CVE-2014-9322 | 7.8 | Dec 17 | arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to… Affected: 11.4 |
| CVE-2014-8369 | 7.8 | Nov 10 | The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows… Affected: 11.4 |
| CVE-2014-7826 | 7.8 | Nov 10 | kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to… Affected: 11.4 |
| CVE-2014-3687 | 7.5 | Nov 10 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of… Affected: 11.4 |
| CVE-2014-3673 | 7.5 | Nov 10 | The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to… Affected: 11.4 |
| CVE-2014-8559 | 5.5 | Nov 10 | The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of… Affected: 11.4 |
| CVE-2014-3690 | 5.5 | Nov 10 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a… Affected: 11.4 |
| CVE-2014-3647 | 5.5 | Nov 10 | arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service… Affected: 11.4 |
| CVE-2014-3646 | 5.5 | Nov 10 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial… Affected: 11.4 |
| CVE-2014-3610 | 5.5 | Nov 10 | The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific… Affected: 11.4 |
| CVE-2014-8134 | 3.3 | Dec 12 | The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier… Affected: 11.4 |
| CVE-2015-5134 | – | Aug 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before… Affected: 11.4 |
| CVE-2015-5133 | – | Aug 14 | Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and… Affected: 11.4 |
| CVE-2015-5132 | – | Aug 14 | Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and… Affected: 11.4 |
| CVE-2015-5131 | – | Aug 14 | Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and… Affected: 11.4 |
| CVE-2015-5130 | – | Aug 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before… Affected: 11.4 |
| CVE-2015-5129 | – | Aug 14 | Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before… Affected: 11.4 |
| CVE-2015-5127 | – | Aug 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before… Affected: 11.4 |
| CVE-2015-5125 | – | Aug 14 | Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &… Affected: 11.4 |
| CVE-2015-5124 | – | Jul 20 | Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK… Affected: 11.4 |
| CVE-2015-3107 | – | Jun 10 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before… Affected: 11.4 |
| CVE-2015-0833 | – | Feb 25 | Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the… Affected: 11.4 |
| CVE-2014-9585 | – | Jan 9 | The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users… Affected: 11.4 |
| CVE-2014-9584 | – | Jan 9 | The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use… Affected: 11.4 |
| CVE-2014-9323 | – | Dec 16 | The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation… Affected: 11.4 |
| CVE-2014-0569 | – | Oct 15 | Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293,… Affected: 11.4 |
| CVE-2014-0564 | – | Oct 15 | Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before… Affected: 11.4 |
| CVE-2014-5459 | – | Sep 27 | The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file… Affected: 11.4 |
| CVE-2014-1564 | – | Sep 3 | Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to… Affected: 11.4 |
| CVE-2014-1563 | – | Sep 3 | Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1… Affected: 11.4 |
| CVE-2014-1553 | – | Sep 3 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to… Affected: 11.4 |
| CVE-2014-3601 | – | Sep 1 | The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows… Affected: 11.4 |
| CVE-2014-0181 | – | Apr 27 | The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local… Affected: 11.4 |
| CVE-2014-0131 | – | Mar 24 | Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel… Affected: 11.4 |
Showing 44