Vulnerabilities in N/A
161,455 resultsCVE-2011-1996—Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code EPSS 58.8%CVE-2016-7262HIGHMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allEPSS 58.8%KEVCVE-2021-40346—An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, aEPSS 58.8%CVE-2012-4347—Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated EPSS 58.8%CVE-2018-11218—Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 EPSS 58.8%CVE-2013-1559—Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authEPSS 58.8%CVE-2017-9445—In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malEPSS 58.8%CVE-2003-0605—The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use EPSS 58.8%CVE-2019-5485—NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repEPSS 58.8%CVE-2021-30119MEDIUMAuthenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6EPSS 58.8%CVE-2006-1364—Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, EPSS 58.7%CVE-2023-27034CRITICALPrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.EPSS 58.7%CVE-2004-0942—Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIEPSS 58.7%CVE-2012-0432—Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an uEPSS 58.7%CVE-2022-25061—TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.EPSS 58.7%CVE-2002-0654—Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a requesEPSS 58.7%CVE-2010-2572HIGHBuffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 EPSS 58.6%KEVCVE-2008-5619—html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2EPSS 58.6%CVE-2013-2068—Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to crEPSS 58.6%CVE-2023-28127HIGHA path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosuEPSS 58.6%