ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.opera.com/docs/changelogs/windows/951/	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/30937	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2008/1998/references	vdb-entry x_refsource_VUPEN x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Resource:

x_refsource_CONFIRM

x_transferred

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Resource:

vdb-entry

x_refsource_XF

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:09 Jul, 2008 | 00:41

Updated At:23 Apr, 2026 | 00:35

Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>windows>>*

Opera

>>opera>>Versions up to 9.51(inclusive)

cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/30937	cve@mitre.org	Vendor Advisory
http://www.opera.com/docs/changelogs/windows/951/	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/1998/references	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	cve@mitre.org	N/A
http://secunia.com/advisories/30937	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.opera.com/docs/changelogs/windows/951/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/1998/references	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	af854a3a-2127-422b-91ae-364da2661108	N/A

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Source: cve@mitre.org

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1323Records found

CVE-2004-1080

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-89.41% / 99.56%

7 Day CHG~0.00%

Published-01 Dec, 2004 | 05:00

Updated-16 Apr, 2026 | 00:27

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."

Product-windows_nt windows_2000 windows_2003_server n/a

CVE-2015-0315

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.90% / 88.41%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2004-0840

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-36.74% / 97.19%

7 Day CHG~0.00%

Published-16 Oct, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.

Product-exchange_server windows_xp windows_server_2003 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2004-0978

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-42.22% / 97.49%

7 Day CHG~0.00%

Published-21 Oct, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.

Product-windows_nt windows_me windows_98se internet_explorer windows_server_2003 windows_2000 windows_xp n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-3953

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-90.51% / 99.62%

7 Day CHG~0.00%

Published-13 Jan, 2010 | 19:00

Updated-21 Apr, 2026 | 21:12

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

Vendor-n/a Apple Inc.openSUSE Microsoft Corporation Adobe Inc.SUSE

Product-acrobat mac_os_x linux_enterprise linux_enterprise_debuginfo windows opensuse n/a Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-0350

Matching Score-8

Matching Score-8

Product-enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary suse_linux_workstation_extension mac_os_x windows flash_player suse_linux_enterprise_desktop enterprise_linux_server_supplementary_eus linux_kernel enterprise_linux_workstation_supplementary opensuse n/a

CVSS Score-10||HIGH

EPSS-3.68% / 88.05%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-5548

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-46.08% / 97.68%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0325

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.68% / 92.55%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-5117

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.49% / 93.33%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-4430.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2004-0572

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-59.21% / 98.26%

7 Day CHG~0.00%

Published-16 Oct, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.

Product-grpconv n/a

CVE-2004-0420

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-47.54% / 97.74%

7 Day CHG~0.00%

Published-20 Apr, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.

Product-internet_explorer ie n/a

CVE-2015-5558

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-47.02% / 97.72%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CVE-2015-5578

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.30% / 88.98%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2004-0574

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-85.37% / 99.38%

7 Day CHG~0.00%

Published-16 Oct, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

Product-exchange_server windows_nt windows_server_2003 windows_2000 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2004-0540

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-14.83% / 94.58%

7 Day CHG~0.00%

Published-08 Jun, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.

Product-windows_2000 n/a

CVE-2015-5118

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-62.73% / 98.40%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3135 and CVE-2015-4432.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5108

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.33% / 90.14%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5097 and CVE-2015-5109.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2009-3959

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-15.43% / 94.73%

7 Day CHG~0.00%

Published-13 Jan, 2010 | 19:00

Updated-23 Apr, 2026 | 00:35

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.

Vendor-unix n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x unix windows n/a

CVE-2004-0214

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-78.25% / 99.04%

7 Day CHG~0.00%

Published-16 Oct, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.

Product-windows_98 windows_me internet_explorer windows_2000 windows_xp n/a

CVE-2015-5575

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.30% / 88.98%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2004-0380

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-74.41% / 98.87%

7 Day CHG~0.00%

Published-06 Apr, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."

Product-outlook_express n/a

CVE-2004-0216

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-54.87% / 98.07%

7 Day CHG~0.00%

Published-16 Oct, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.

Product-internet_explorer ie n/a

CVE-2004-0201

Matching Score-8

Assigner-MITRE Corporation

Product-windows_98 windows_nt windows_me definity_one_media_server ip600_media_servers windows_98se windows_2000 s8100 windows_2003_server windows_xp modular_messaging_message_storage_server n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-50.68% / 97.88%

7 Day CHG~0.00%

Published-14 Jul, 2004 | 04:00

Updated-16 Apr, 2026 | 00:27

Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.

Vendor-n/a Avaya LLC Microsoft Corporation

CVE-2015-5125

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.96% / 88.49%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3131

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.49% / 93.33%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CVE-2015-5570

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.69% / 82.46%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, and CVE-2015-6682.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CVE-2015-0303

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.31% / 93.62%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CVE-2015-5556

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-47.02% / 97.72%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2003-1357

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.84% / 74.84%

7 Day CHG~0.00%

Published-14 Oct, 2007 | 19:00

Updated-16 Apr, 2026 | 00:27

ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access.

Vendor-replicom n/a Microsoft Corporation

Product-windows_nt proxyview n/a

CVE-2015-0301

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.40% / 91.81%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-5119

Matching Score-8

Matching Score-8

Product-evergreen linux_enterprise_desktop mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop enterprise_linux_server_from_rhui windows flash_player enterprise_linux_server_aus enterprise_linux_eus linux_kernel linux_enterprise_workstation_extension opensuse n/a Flash Player

CVSS Score-7.8||HIGH

EPSS-93.21% / 99.81%

7 Day CHG+0.06%

Published-08 Jul, 2015 | 14:00

Updated-21 Apr, 2026 | 21:08

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2015-0323

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.94% / 92.13%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4716

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-19.52% / 95.47%

7 Day CHG+4.17%

Published-21 Oct, 2015 | 18:00

Updated-06 May, 2026 | 22:30

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation ownCloud GmbH

Product-windows owncloud_server owncloud n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2015-5131

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-71.45% / 98.75%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5133

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-71.45% / 98.75%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4431

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.54% / 90.36%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-3134.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0358

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.32% / 84.98%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0309

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.85% / 92.07%

7 Day CHG-1.87%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4447

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.10% / 90.88%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-2015-4438, CVE-2015-4441, CVE-2015-4445, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CVE-2003-0224

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-18.92% / 95.39%

7 Day CHG~0.00%

Published-30 May, 2003 | 04:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."

Product-internet_information_services n/a

CVE-2000-1089

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-68.84% / 98.64%

7 Day CHG~0.00%

Published-22 Jan, 2001 | 05:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.

Product-windows_nt windows_2000 n/a

CVE-2015-0329

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.43% / 93.66%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0346

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.98% / 91.54%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0306

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.31% / 93.62%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CVE-2015-0327

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.94% / 92.13%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0333

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.33% / 92.85%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0314

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.43% / 93.66%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0310

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-10.11% / 93.18%

7 Day CHG~0.00%

Published-23 Jan, 2015 | 21:00

Updated-21 Apr, 2026 | 21:09

Known KEV||Action Due Date - 2022-06-15||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

Product-linux_kernel windows flash_player mac_os_x n/a Flash Player

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2003-0528

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-57.45% / 98.18%

7 Day CHG~0.00%

Published-12 Sep, 2003 | 04:00

Updated-16 Apr, 2026 | 00:27

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715.

Product-windows_xp windows_nt windows_2000 windows_2003_server n/a

CVE-2015-3050

Matching Score-8

Matching Score-8