eEye Digital Security
  • Login to the eEye Business Client Portal
  • Shop for eEye Products
  • Read the eEye Blog
  • Subscribe to eEye RSS Feeds
  • Follow eEye on Twitter
  • Follow eEye of Facebook
Resources

eEye Zero-Day Tracker:
Your Vulnerability Watchlist


Your One-Stop Info Shop for Zero-Day Threat Education and Analysis

The eEye Research Team lives and breathes vulnerabilities every single day. Trust us to be your source for timely accurate information on Zero-Day vulnerabilities.

What’s the Zero-Day Tracker?
The tracker catalogs the latest Zero-Day vulnerabilities and provides detailed analysis of each, including affected software, severity level, potential impact, and mitigation and protection procedures.

12.6.2011 - Adobe
Adobe Reader/Acrobat U3D Memory Corruption Vulnerability

11.14.2011 - Mozilla
Firefox 8.0 Null Pointer Dereference Vulnerability

11.10.2011 - Apple
Apple OS X Sandbox Predefined Profile Bypass Vulnerability

11.7.2011 - Oracle
Oracle Hyperion Strategic Finance 12.x Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow

11.4.2011 - Microsoft
Microsoft Excel 2003 Use After Free

11.3.2011 - Hewlett-Packard
HP Data Protector Buffer Overflow and Directory Traversal Vulnerabilities

11.2.2011 - Apache Software Foundation
Apache HTTP Server ap_pregsub() buffer overflow

10.27.2011 - IBM
Potential Security Exposure in IBM Lotus Sametime Configuration Servlet

10.26.2011 - Hewlett-Packard
HP Network Node Manager Remote Unauthorized Disclosure of Information

10.25.2011 - Trend Micro
Trend Micro IWSS 3.1 privilege escalation

10.24.2011 - Oracle
Oracle AutoVue Multiple Vulnerabilities

10.18.2011 - Skype Limited
Skype Multiple 0day Vulnerabilities

10.12.2011 - VMware Inc.
VMware ESXi and ESX Multiple Vulnerabilities

10.10.2011 - OPC Systems
OPC Systems.NET Denial of Service Vulnerability

10.10.2011 - IRAI
IRAI AUTOMGEN Use After Free Vulnerability

10.10.2011 - Certec EDV GmbH
atvise webMI2ADS Web Server Multiple Vulnerabilities

9.27.2011 - ARC Informatique
PcVue 10 and Prior Multiple Vulnerabilities

9.23.2011 - Microsoft
Internet Explorer MHTML Mime-Formatted Request Vulnerability

9.22.2011 - Sunway ForceControl Technology Co.
Sunway Force Control Directory Traversal and ActiveX Multiple Vulnerabilities

9.18.2011 - Apple
OS X Lion Fails to Verify Authentication Before Changing User Password

9.18.2011 - Apple
OS X Lion Fails to Protect Users' Password Hashes

9.15.2011 - DivX LLC.
DivX Plus Web Player "file://" Buffer Overflow Vulnerability

9.13.2011 - Progea S.r.l.
Progea Movicon/PowerHMI Memory Corruption

9.13.2011 - Carel Industries S.r.l.
Carel PlantVisor Directory Traversal

9.13.2011 - Rockwell Automation, Inc.
Rockwell RSLogix / FactoryTalk RnaUtility.dll Multiple Vulnerabilities

9.13.2011 - Beckhoff Automation GmbH
Beckhoff TwinCAT Denial of Service

9.13.2011 - Cogent Real-Time Systems Inc.
Cogent DataHub Stack Unicode Overflow

9.12.2011 - ScadaTEC
ScadaTEC ModbusTagServer & ScadaPhone Buffer Overflow

9.9.2011 - Ubuntu
Ubuntu 11.04 FTP Client Local Buffer Overflow Denial of Service

9.2.2011 - Apple
Apple Mac OS X Keychain Certificate Security Bypass

9.2.2011 - BroadWin Technology, Inc.
BroadWin WebAccess Client Multiple Vulnerabilities

8.26.2011 - Sunway Force Control Technology Co.
Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Multiple Vulnerabilities

7.25.2011 - Apple
Mac OS X Lion OpenLDAP Security Bypass

6.28.2011 - Hewlett-Packard
HP Data Protector Multiple Remote Code Execution Vulnerabilities

5.14.2011 - Nullsoft
Winamp in_midi heap overflow

5.12.2011 - Symantec
Symantec Backup Exec System Recovery 8.5 Kernel Pointer Dereference

5.3.2011 - VideoLAN
VLC Media Player libmodplug Buffer Overflow Vulnerabilities

4.12.2011 - Microsoft
Microsoft HTML Help

4.6.2011 - VideoLAN
VLC Media Player libmodplug Buffer Overflow Vulnerability

4.2.2011 - Microsoft
IE9 VUPEN Non-disclosed Remote Code Execution Vullnerability

3.23.2011 - Hewlett-Packard
Hewlett-Packard Virtual SAN Appliance hydra.exe Login Request Remote Code Execution Vulnerability

3.23.2011 - Hewlett-Packard
Hewlett-Packard Data Protector Media Operations DBServer.exe Remote Code Execution Vulnerability

3.22.2011 - Siemens
Siemens Tecnomatix FactoryLink 8.0.1.1473 Multiple Vulnerabilities

3.22.2011 - IBM
IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability

3.13.2011 - The PHP Group
PHP Substr_Replace Memory Corruption

3.7.2011 - KingView
Wellintech KingView KVWebSvr.dll ActiveX Remote Code Execution

3.7.2011 - Microsoft
Microsoft .NET Framework Optimization Service Privilege Escalation

2.23.2011 - Cisco
Cisco Secure Desktop CSDWebInstaller ActiveX Control Cleaner.cab Remote Code Execution

2.23.2011 - Cisco
Cisco Secure Desktop CSDWebInstaller Remote Code Execution

2.22.2011 - Citrix
Citrix Licensing Server 11.x Unspecified Vulnerabilities

2.18.2011 - Dell
Dell DellSystemLite.Scanner ActiveX Control

2.15.2011 - Oracle
Oracle 10/11g exp.exe - param file Local Buffer Overflow

2.15.2011 - Red Hat
Red Hat Enterprise Linux Flash-plugin Multiple Vulnerabilities

2.9.2011 - Linksys
Linksys WAP610N Unauthenticated Root Console

2.7.2011 - Hewlett-Packard
Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote Code Execution

2.7.2011 - Hewlett-Packard
Hewlett-Packard Data Protector Client EXEC_CMD Perl Remote Code Execution

2.7.2011 - Hewlett-Packard
Hewlett-Packard Data Protector Client EXEC_SETUP Remote Code Execution

2.7.2011 - Hewlett-Packard
Hewlett-Packard Data Protector Cell Manager Service Authentication Bypass

2.7.2011 - SCO
SCO OpenServer IMAP Deamon Long Verp Parsing Remote Code Execution

2.7.2011 - IBM
IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution

2.7.2011 - IBM
IBM Lotus Notes cai URI Handler Remote Code Execution

2.1.2011 - AOL
AOL Rich File Processing Buffer Overflow Vulnerability

1.25.2011 - Sun Microsystems
Sun Microsystems SunScreen Firewall Root Exploit

1.24.2011 - A-V Tronics
InetServe SMTP / POP3 Service Format String Vulnerability

1.24.2011 - MaraDNS
MaraDNS "compress_add_dlabel_points()" Buffer Overflow

1.10.2011 - NetSupport
NetSupport Manager Client Buffer Overflow

12.29.2010 - VideoLAN
VideoLAN VLC Media Player Real Plugin Buffer Overflow

12.22.2010 - Microsoft
Microsoft WMI Administrative Tools ActiveX Remote Code Execution

11.28.2010 - Computer Associates
CA Internet Security Sandbox Driver Local Privilege Escalation

11.4.2010 - Adobe
Adobe Reader printSeps() Heap Corruption

11.2.2010 - Trend Micro
Trend Micro Titanium Maximum Security 2011 Local Kernel Level Privilege Escalation

10.19.2010 - VideoLAN
VLC Firefox Plugin 0-day Remote Code Execution

9.14.2010 - Microsoft
Microsoft Outlook Web Access (OWA) CSRF Privilege Elevation Vulnerability

8.23.2010 - Microsoft
Microsoft Windows Insecure Library Loading Vulnerability (DLL Hijacking)

8.11.2010 - Microsoft
Windows Service Isolation Bypass Privilege Elevation Vulnerability

6.30.2010 - Microsoft
Microsoft Internet Explorer 6 Memory Address Disclosure

6.10.2010 - Cisco
Linksys WAP54G Undocumented Debug Interface Vulnerability

6.8.2010 - Microsoft
Microsoft Office XP COM Object Instantiation Validation Vulnerability

2.18.2010 - IBM
IBM Lotus Notes Unspecified Buffer Overflow Vulnerability

10.28.2006 - Microsoft
Internet Connection Sharing DoS

11.16.2005 - Microsoft
RPC Memory Exhaustion

Current

Archives


Next Steps

Free Trial
Test drive an eEye product
On-demand Demo
See an online product tour
One-on-one Demo
Schedule a personalized tour
Compare Products
See side-by-side features
Buy Now
Go to eEye product store
Contact | Site Map | Privacy | Website Feedback | 1.866.339.3732
© 1998 – 2011 eEye Digital Security. All rights reserved.