By publication date

Exploited and new serious CVEs: June 2014

95 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2014-0237No exploit	The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackersphp · php · CWE-399 Pre-auth Denial of service	Medium5.0	—	19.8%	Jun 1, 2014
26Monitor	CVE-2014-0238No exploit	The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers php · php · CWE-119 Pre-auth Memory safety Denial of service	Medium5.0	—	20.8%	Jun 1, 2014
63This week	CVE-2014-3936Weaponized	Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev.dlink · dir505 shareport mobile companion firmware · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	76.5%	Jun 2, 2014
42Plan	CVE-2013-1412Weaponized	DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is dleviet · datalife engine · CWE-94 pre-auth RCE	High7.5	—	40.4%	Jun 2, 2014
30Monitor	CVE-2014-3466Proof of concept	Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3gnu · gnutls · CWE-119 pre-auth RCE Memory safety	Medium6.8	—	11.2%	Jun 3, 2014
58Plan	CVE-2014-3913Weaponized	Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a requestericom · accessnow server · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	60.8%	Jun 4, 2014
23Monitor	CVE-2014-3976Proof of concept	Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers ta10networks · advanced core operating system · CWE-119 pre-auth RCE Memory safety Denial of service	Medium5.0	—	11.6%	Jun 5, 2014
57Plan	CVE-2014-0195Weaponized	The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properlopenssl · openssl · CWE-120 pre-auth RCE Memory safety	Medium6.8	—	99.9%	Jun 5, 2014
43Plan	CVE-2014-0221Proof of concept	The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote aopenssl · openssl Pre-auth Denial of service	Medium4.3	—	87.8%	Jun 5, 2014
60This week	CVE-2014-0224Weaponized	OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, whiopenssl · openssl · CWE-326 Pre-auth Weak crypto	High7.4	—	95.3%	Jun 5, 2014
43Plan	CVE-2014-3470No exploit	The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anoopenssl · openssl · CWE-476 Pre-auth Memory safety Denial of service	Medium4.3	—	85.7%	Jun 5, 2014
72This week	CVE-2014-3153Weaponized	The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresselinux · linux kernel Local privilege escalation	High7.8	KEV	37.2%	Jun 7, 2014
52Plan	CVE-2014-0282Proof of concept	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	50.9%	Jun 11, 2014
43Plan	CVE-2014-1769Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-94 pre-auth RCE	Critical9.3	—	20.4%	Jun 11, 2014
44Plan	CVE-2014-1772Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	21.7%	Jun 11, 2014
56Plan	CVE-2014-1773Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	63.1%	Jun 11, 2014
43Plan	CVE-2014-1774Proof of concept	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-94 pre-auth RCE	Critical9.3	—	20.4%	Jun 11, 2014
44Plan	CVE-2014-1775Proof of concept	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	22.8%	Jun 11, 2014
23Monitor	CVE-2014-1777Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to read local files on the client via a crafted web site, aka "Internet Explormicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	20.9%	Jun 11, 2014
32Monitor	CVE-2014-1778Proof of concept	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vmicrosoft · internet explorer · CWE-264 pre-auth RCE	Medium6.8	—	15.4%	Jun 11, 2014
44Plan	CVE-2014-1779Proof of concept	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.2%	Jun 11, 2014
43Plan	CVE-2014-1780Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
43Plan	CVE-2014-1781Proof of concept	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
43Plan	CVE-2014-1782Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
43Plan	CVE-2014-1783Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
43Plan	CVE-2014-1784Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
46Plan	CVE-2014-1785Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	30.2%	Jun 11, 2014
43Plan	CVE-2014-1786Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
43Plan	CVE-2014-1788Proof of concept	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
46Plan	CVE-2014-1789Proof of concept	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	28.5%	Jun 11, 2014
43Plan	CVE-2014-1790Proof of concept	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
44Plan	CVE-2014-1791Proof of concept	Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.7%	Jun 11, 2014
43Plan	CVE-2014-1792Proof of concept	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
43Plan	CVE-2014-1794Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
44Plan	CVE-2014-1795Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.7%	Jun 11, 2014
43Plan	CVE-2014-1796Proof of concept	Microsoft Internet Explorer 6 and 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.6%	Jun 11, 2014
44Plan	CVE-2014-1797Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.4%	Jun 11, 2014
47Plan	CVE-2014-1799Proof of concept	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	32.8%	Jun 11, 2014
44Plan	CVE-2014-1800Proof of concept	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.4%	Jun 11, 2014
43Plan	CVE-2014-1802Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
44Plan	CVE-2014-1803Proof of concept	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	22.8%	Jun 11, 2014
43Plan	CVE-2014-1804Proof of concept	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
44Plan	CVE-2014-1805Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	21.7%	Jun 11, 2014
25Monitor	CVE-2014-1811No exploit	The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Semicrosoft · windows 7 · CWE-399 Pre-auth Denial of service	Medium5.0	—	18.2%	Jun 11, 2014
21Monitor	CVE-2014-1816No exploit	Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a dowmicrosoft · xml core services · CWE-264 Pre-auth	Medium4.3	—	14.3%	Jun 11, 2014
43Plan	CVE-2014-1817No exploit	usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 amicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	18.8%	Jun 11, 2014
43Plan	CVE-2014-1818No exploit	GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Winmicrosoft · windows 7 · CWE-20 pre-auth RCE	Critical9.3	—	20.2%	Jun 11, 2014
32Monitor	CVE-2014-1823No exploit	Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to injemicrosoft · lync server · CWE-79 Pre-auth XSS	Medium4.3	—	51.0%	Jun 11, 2014
43Plan	CVE-2014-2753Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
44Plan	CVE-2014-2754Proof of concept	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	21.7%	Jun 11, 2014
43Plan	CVE-2014-2755Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2756Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
44Plan	CVE-2014-2757Proof of concept	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	22.8%	Jun 11, 2014
43Plan	CVE-2014-2758Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2759Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2760Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2761Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2763Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2764Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2765Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2766Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2767Proof of concept	Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2768Proof of concept	Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2769Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2770Proof of concept	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2771Proof of concept	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2772Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2773Proof of concept	Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Jun 11, 2014
43Plan	CVE-2014-2775Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.9%	Jun 11, 2014
43Plan	CVE-2014-2776Proof of concept	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	21.5%	Jun 11, 2014
37Monitor	CVE-2014-2777Proof of concept	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vmicrosoft · internet explorer · CWE-94 pre-auth RCE	High7.5	—	22.9%	Jun 11, 2014
43Plan	CVE-2014-2778No exploit	Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memmicrosoft · office compatibility pack · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.9%	Jun 11, 2014
33Monitor	CVE-2014-0535No exploit	Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.adobe · adobe air sdk · CWE-264 Pre-auth	High7.5	—	10.0%	Jun 11, 2014
43Plan	CVE-2014-0536No exploit	Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.adobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	10.9%	Jun 11, 2014
31Monitor	CVE-2010-5300Proof of concept	Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execujzip · jzip · CWE-119 pre-auth RCE Memory safety	Medium6.8	—	14.6%	Jun 11, 2014
44Plan	CVE-2011-3625Weaponized	Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackersmplayer2 · mplayer2 · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.1%	Jun 11, 2014
33Monitor	CVE-2010-5301Proof of concept	Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD request.senkas · kolibri · CWE-119 pre-auth RCE Memory safety	High7.5	—	10.6%	Jun 13, 2014
47Plan	CVE-2013-3663No exploit	Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackegoogle · sketchup · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	31.8%	Jun 13, 2014
40Plan	CVE-2013-3843Weaponized	Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remonkey-project · monkey · CWE-119 pre-auth RCE Memory safety	Medium6.8	—	20.1%	Jun 13, 2014
62This week	CVE-2014-3804Weaponized	The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_alienvault · open source security information management · CWE-94 pre-auth RCE	Critical10.0	—	72.3%	Jun 13, 2014
44Plan	CVE-2014-3805Proof of concept	The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_licalienvault · open source security information management · CWE-94 pre-auth RCE	Critical10.0	—	13.0%	Jun 13, 2014
34Monitor	CVE-2014-4158Proof of concept	Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.senkas · kolibri · CWE-119 pre-auth RCE Memory safety	High7.5	—	14.3%	Jun 13, 2014
41Plan	CVE-2011-2592No exploit	Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plcitrix · access gateway plug-in · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	14.8%	Jun 18, 2014
63This week	CVE-2013-6221Weaponized	Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server ihp · service virtualization · CWE-22 pre-auth RCE Path traversal	Critical10.0	—	77.9%	Jun 18, 2014
21Monitor	CVE-2014-2779No exploit	mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) vimicrosoft · malware protection engine · CWE-20 Pre-auth Denial of service	Medium4.3	—	13.3%	Jun 18, 2014
23Monitor	CVE-2014-4049No exploit	Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a php · php · CWE-119 pre-auth RCE Memory safety	Medium5.1	—	10.9%	Jun 18, 2014
44Plan	CVE-2014-2609No exploit	The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to ehp · executive scorecard · CWE-287 pre-auth RCE Auth bypass	Critical10.0	—	12.9%	Jun 19, 2014
40Plan	CVE-2014-2611No exploit	Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users tohp · executive scorecard · CWE-22 RCE Path traversal	Critical9.0	—	11.8%	Jun 19, 2014
44Plan	CVE-2014-2782Proof of concept	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	22.3%	Jun 19, 2014
45Plan	CVE-2014-2962Proof of concept	Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows rembelkin · n150 f9k1009 firmware · CWE-22 Pre-auth Path traversal	High7.8	—	47.0%	Jun 19, 2014
30Monitor	CVE-2011-4367Proof of concept	Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2apache · myfaces · CWE-22 Pre-auth Path traversal	Medium5.0	—	33.7%	Jun 19, 2014
35Monitor	CVE-2014-4334Proof of concept	Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary code via a long string ubi · rayman legends · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.1%	Jun 19, 2014
44Plan	CVE-2012-2052Proof of concept	Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows readobe · photoshop cs5 · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	23.3%	Jun 19, 2014
44Plan	CVE-2012-5106Proof of concept	Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a Pfreefloat · freefloat ftp server · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	14.1%	Jun 20, 2014
19Monitor	CVE-2014-0244No exploit	The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to causesamba · samba · CWE-20 Denial of service	Low3.3	—	20.4%	Jun 23, 2014

CVE-2014-0237
26Monitor
The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers
MediumCVSS 5.0No exploitEPSS 19%
- Pre-auth
- Denial of service
php · phpJun 1, 2014
CVE-2014-0238
26Monitor
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers
MediumCVSS 5.0No exploitEPSS 20%
- Pre-auth
- Memory safety
- Denial of service
php · phpJun 1, 2014
CVE-2014-3936
63This week
Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev.
CriticalCVSS 10.0WeaponizedEPSS 76%
- pre-auth RCE
- Memory safety
dlink · dir505 shareport mobile companion firmwareJun 2, 2014
CVE-2013-1412
42Plan
DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is
HighCVSS 7.5WeaponizedEPSS 40%
- pre-auth RCE
dleviet · datalife engineJun 2, 2014
CVE-2014-3466
30Monitor
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3
MediumCVSS 6.8Proof of conceptEPSS 11%
- pre-auth RCE
- Memory safety
gnu · gnutlsJun 3, 2014
CVE-2014-3913
58Plan
Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request
CriticalCVSS 10.0WeaponizedEPSS 60%
- pre-auth RCE
- Memory safety
ericom · accessnow serverJun 4, 2014
CVE-2014-3976
23Monitor
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers t
MediumCVSS 5.0Proof of conceptEPSS 11%
- pre-auth RCE
- Memory safety
- Denial of service
a10networks · advanced core operating systemJun 5, 2014
CVE-2014-0195
57Plan
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properl
MediumCVSS 6.8WeaponizedEPSS 99%
- pre-auth RCE
- Memory safety
openssl · opensslJun 5, 2014
CVE-2014-0221
43Plan
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote a
MediumCVSS 4.3Proof of conceptEPSS 87%
- Pre-auth
- Denial of service
openssl · opensslJun 5, 2014
CVE-2014-0224
60This week
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, whi
HighCVSS 7.4WeaponizedEPSS 95%
- Pre-auth
- Weak crypto
openssl · opensslJun 5, 2014
CVE-2014-3470
43Plan
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an ano
MediumCVSS 4.3No exploitEPSS 85%
- Pre-auth
- Memory safety
- Denial of service
openssl · opensslJun 5, 2014
CVE-2014-3153
72This week
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresse
HighCVSS 7.8KEVWeaponizedEPSS 37%
- Local privilege escalation
linux · linux kernelJun 7, 2014
CVE-2014-0282
52Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 50%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1769
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
microsoft · internet explorerJun 11, 2014
CVE-2014-1772
44Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 21%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1773
56Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 63%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1774
43Plan
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
microsoft · internet explorerJun 11, 2014
CVE-2014-1775
44Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 22%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1777
23Monitor
Microsoft Internet Explorer 10 and 11 allows remote attackers to read local files on the client via a crafted web site, aka "Internet Explor
MediumCVSS 4.3Proof of conceptEPSS 20%
- Pre-auth
- Info leak
microsoft · internet explorerJun 11, 2014
CVE-2014-1778
32Monitor
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified v
MediumCVSS 6.8Proof of conceptEPSS 15%
- pre-auth RCE
microsoft · internet explorerJun 11, 2014
CVE-2014-1779
44Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1780
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1781
43Plan
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1782
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1783
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1784
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1785
46Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 30%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1786
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1788
43Plan
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1789
46Plan
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 28%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1790
43Plan
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1791
44Plan
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1792
43Plan
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1794
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1795
44Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1796
43Plan
Microsoft Internet Explorer 6 and 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1797
44Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1799
47Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 32%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1800
44Plan
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1802
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1803
44Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 22%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1804
43Plan
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1805
44Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 21%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-1811
25Monitor
The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Se
MediumCVSS 5.0No exploitEPSS 18%
- Pre-auth
- Denial of service
microsoft · windows 7Jun 11, 2014
CVE-2014-1816
21Monitor
Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a dow
MediumCVSS 4.3No exploitEPSS 14%
- Pre-auth
microsoft · xml core servicesJun 11, 2014
CVE-2014-1817
43Plan
usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
CriticalCVSS 9.3No exploitEPSS 18%
- pre-auth RCE
- Memory safety
microsoft · windows 7Jun 11, 2014
CVE-2014-1818
43Plan
GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Win
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
microsoft · windows 7Jun 11, 2014
CVE-2014-1823
32Monitor
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inje
MediumCVSS 4.3No exploitEPSS 51%
- Pre-auth
- XSS
microsoft · lync serverJun 11, 2014
CVE-2014-2753
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2754
44Plan
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3Proof of conceptEPSS 21%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2755
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2756
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2757
44Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 22%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2758
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2759
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2760
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2761
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2763
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2764
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2765
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2766
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2767
43Plan
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2768
43Plan
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2769
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2770
43Plan
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2771
43Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2772
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2773
43Plan
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
CriticalCVSS 9.3Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2775
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2776
43Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 21%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2014
CVE-2014-2777
37Monitor
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified v
HighCVSS 7.5Proof of conceptEPSS 22%
- pre-auth RCE
microsoft · internet explorerJun 11, 2014
CVE-2014-2778
43Plan
Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (mem
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · office compatibility packJun 11, 2014
CVE-2014-0535
33Monitor
Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.
HighCVSS 7.5No exploitEPSS 10%
- Pre-auth
adobe · adobe air sdkJun 11, 2014
CVE-2014-0536
43Plan
Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
- Memory safety
adobe · flash playerJun 11, 2014
CVE-2010-5300
31Monitor
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execu
MediumCVSS 6.8Proof of conceptEPSS 14%
- pre-auth RCE
- Memory safety
jzip · jzipJun 11, 2014
CVE-2011-3625
44Plan
Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers
CriticalCVSS 9.3WeaponizedEPSS 24%
- pre-auth RCE
- Memory safety
mplayer2 · mplayer2Jun 11, 2014
CVE-2010-5301
33Monitor
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD request.
HighCVSS 7.5Proof of conceptEPSS 10%
- pre-auth RCE
- Memory safety
senkas · kolibriJun 13, 2014
CVE-2013-3663
47Plan
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attacke
CriticalCVSS 9.3No exploitEPSS 31%
- pre-auth RCE
- Memory safety
google · sketchupJun 13, 2014
CVE-2013-3843
40Plan
Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows re
MediumCVSS 6.8WeaponizedEPSS 20%
- pre-auth RCE
- Memory safety
monkey-project · monkeyJun 13, 2014
CVE-2014-3804
62This week
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_
CriticalCVSS 10.0WeaponizedEPSS 72%
- pre-auth RCE
alienvault · open source security information managementJun 13, 2014
CVE-2014-3805
44Plan
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_lic
CriticalCVSS 10.0Proof of conceptEPSS 13%
- pre-auth RCE
alienvault · open source security information managementJun 13, 2014
CVE-2014-4158
34Monitor
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.
HighCVSS 7.5Proof of conceptEPSS 14%
- pre-auth RCE
- Memory safety
senkas · kolibriJun 13, 2014
CVE-2011-2592
41Plan
Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Pl
CriticalCVSS 9.3No exploitEPSS 14%
- pre-auth RCE
- Memory safety
citrix · access gateway plug-inJun 18, 2014
CVE-2013-6221
63This week
Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server i
CriticalCVSS 10.0WeaponizedEPSS 77%
- pre-auth RCE
- Path traversal
hp · service virtualizationJun 18, 2014
CVE-2014-2779
21Monitor
mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) vi
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
- Denial of service
microsoft · malware protection engineJun 18, 2014
CVE-2014-4049
23Monitor
Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a
MediumCVSS 5.1No exploitEPSS 10%
- pre-auth RCE
- Memory safety
php · phpJun 18, 2014
CVE-2014-2609
44Plan
The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to e
CriticalCVSS 10.0No exploitEPSS 12%
- pre-auth RCE
- Auth bypass
hp · executive scorecardJun 19, 2014
CVE-2014-2611
40Plan
Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to
CriticalCVSS 9.0No exploitEPSS 11%
- RCE
- Path traversal
hp · executive scorecardJun 19, 2014
CVE-2014-2782
44Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 22%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 19, 2014
CVE-2014-2962
45Plan
Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows rem
HighCVSS 7.8Proof of conceptEPSS 47%
- Pre-auth
- Path traversal
belkin · n150 f9k1009 firmwareJun 19, 2014
CVE-2011-4367
30Monitor
Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2
MediumCVSS 5.0Proof of conceptEPSS 33%
- Pre-auth
- Path traversal
apache · myfacesJun 19, 2014
CVE-2014-4334
35Monitor
Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary code via a long string
HighCVSS 7.5Proof of conceptEPSS 15%
- pre-auth RCE
- Memory safety
ubi · rayman legendsJun 19, 2014
CVE-2012-2052
44Plan
Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows re
CriticalCVSS 9.3Proof of conceptEPSS 23%
- pre-auth RCE
- Memory safety
adobe · photoshop cs5Jun 19, 2014
CVE-2012-5106
44Plan
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a P
CriticalCVSS 10.0Proof of conceptEPSS 14%
- pre-auth RCE
- Memory safety
freefloat · freefloat ftp serverJun 20, 2014
CVE-2014-0244
19Monitor
The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause
LowCVSS 3.3No exploitEPSS 20%
- Denial of service
samba · sambaJun 23, 2014