İçeriğe atla
Noroxi

Apple kayıtları

apple üreticisine ait 15.437 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
167 · %1,1
Silahlaştırılmış
243 · %1,6
Pre-auth RCE
4.143
Düzeltme kaydı olan
%24,3
Yayından KEV’e ortanca
234 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

10.000+ kayıt
  • CVE-2021-44228
    100Hemen

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100

    apache · log4j10 Ara 2021

  • CVE-2014-6271
    99Hemen

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    gnu · bash24 Eyl 2014

  • CVE-2012-1823
    99Hemen

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    php · php11 May 2012

  • CVE-2015-3113
    99Hemen

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    adobe · flash player23 Haz 2015

  • CVE-2014-7169
    99Hemen

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    gnu · bash24 Eyl 2014

  • CVE-2014-0497
    99Hemen

    Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 1

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    adobe · flash player5 Şub 2014

  • CVE-2015-5119
    99Hemen

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    adobe · flash player8 Tem 2015

  • CVE-2015-0313
    98Hemen

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95

    adobe · flash player2 Şub 2015

  • CVE-2015-5122
    97Hemen

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    adobe · flash player14 Tem 2015

  • CVE-2013-0625
    97Hemen

    Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly exe

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    adobe · coldfusion8 Oca 2013

  • CVE-2011-2462
    96Hemen

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %89

    adobe · acrobat7 Ara 2011

  • CVE-2011-0611
    95Hemen

    Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    adobe · flash player13 Nis 2011

  • CVE-2015-0311
    95Hemen

    Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and throu

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86

    adobe · flash player23 Oca 2015

  • CVE-2021-21017
    91Hemen

    Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %86

    adobe · acrobat11 Şub 2021

  • CVE-2015-3043
    91Hemen

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows att

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %74

    adobe · flash player14 Nis 2015

  • CVE-2023-44487
    90Hemen

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware10 Eki 2023

  • CVE-2009-3953
    90Hemen

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remot

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %83

    adobe · acrobat13 Oca 2010

  • CVE-2012-0754
    89Hemen

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %91

    adobe · flash player16 Şub 2012

  • CVE-2018-15982
    88Hemen

    Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %90

    adobe · flash player18 Oca 2019

  • CVE-2018-4878
    88Hemen

    A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %90

    adobe · flash player6 Şub 2018

  • CVE-2013-0640
    87Hemen

    Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or c

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %87

    adobe · acrobat13 Şub 2013

  • CVE-2010-1297
    86Hemen

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3,

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %83

    adobe · air8 Haz 2010

  • CVE-2009-4324
    86Hemen

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %82

    adobe · acrobat14 Ara 2009

  • CVE-2022-2294
    86Hemen

    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %70

    google · chrome27 Tem 2022

  • CVE-2015-8651
    85Hemen

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %68

    adobe · air sdk28 Ara 2015