Skip to content
BackEsc
Connect AISign inSign up free

October 2012 · Band 4

Possible (1 to 10%)

418 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Connect AI

Every one of the 418 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4173, CVE-2…CVE-2012-4172Adobe · 9.7% likely

    CWE-119Adobe

  2. Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to…CVE-2012-1189Bernhard Wymann · 9.6% likely

    CWE-119

  3. Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2…CVE-2012-4175Adobe · 9.6% likely

    CWE-119Adobe

  4. Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2…CVE-2012-4174Adobe · 9.6% likely

    CWE-119Adobe

  5. Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2…CVE-2012-4173Adobe · 9.6% likely

    CWE-119Adobe

  6. Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel" values in a TIFF image f…CVE-2011-5233Irfanview · 9.3% likely

    CWE-119Irfanview

  7. Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunde…CVE-2012-4180Mozilla · 9.3% likely

    CWE-119Mozilla

  8. Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.CVE-2011-5219Mpdf1 · 9.2% likely

    CWE-22

  9. Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2…CVE-2012-5273Adobe · 8.6% likely

    CWE-119Adobe

  10. Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, a…CVE-2012-4185Mozilla · 8.6% likely

    CWE-119Mozilla

  11. Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application crash) via a long string in an APPE command.CVE-2012-5329Typsoft · 8.5% likely

    CWE-119Typsoft

  12. Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not…CVE-2012-5671Exim · 8.4% likely

    CWE-119Exim

  13. Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service (system cras…CVE-2012-3400Linux · 7.8% likely

    CWE-787Linux

  14. The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted ASCONF chunk.CVE-2012-3549Freebsd · 7.8% likely

    Freebsd

  15. Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API c…CVE-2012-4501Apache · 7.8% likely

    CWE-264Apache

  16. Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot dot) in the "include file" SSI directive. NOTE: this issue…CVE-2009-5067Html2ps Project · 7.6% likely

    CWE-22

  17. Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.03 has unknown impact and attack vectors.CVE-2012-3506Apache · 7.5% likely

    Apache

  18. Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged hea…CVE-2012-3505Banu · 7.3% likely

    CWE-310

  19. Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors.CVE-2012-4176Adobe · 7.3% likely

    CWE-20Adobe

  20. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5266Adobe · 7.3% likely

    CWE-119Adobe

  21. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5265Adobe · 7.3% likely

    CWE-119Adobe

  22. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5264Adobe · 7.3% likely

    CWE-119Adobe

  23. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5262Adobe · 7.3% likely

    CWE-119Adobe

  24. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5260Adobe · 7.3% likely

    CWE-119Adobe

  25. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5259Adobe · 7.3% likely

    CWE-119Adobe

  26. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5257Adobe · 7.3% likely

    CWE-119Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated