Vulnerabilities in N/A
161,272 resultsCVE-2017-9660—A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overfloEPSS 5.1%CVE-2005-3440—Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unknown impact and attack vectors, aka OracEPSS 5.1%CVE-2019-20427—In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lEPSS 5.1%CVE-2017-3002—Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object reEPSS 5.1%CVE-2017-3001—Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActEPSS 5.1%CVE-2015-8368—ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and usernEPSS 5.1%CVE-2014-5334—FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.EPSS 5.1%CVE-2021-3144—In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master EPSS 5.1%CVE-2021-39509—An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of EPSS 5.1%CVE-2012-6129—Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers tEPSS 5.1%CVE-2006-2940—OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via pEPSS 5.1%CVE-2023-29983MEDIUMCross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog EPSS 5.1%CVE-2006-4455—Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors inEPSS 5.1%CVE-2005-1604—PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensiEPSS 5.1%CVE-2007-4708—Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler.EPSS 5.1%CVE-2017-17043—The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketpEPSS 5.1%CVE-2017-14952—Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbEPSS 5.1%CVE-2007-1540—Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows remote attackers to EPSS 5.1%CVE-2017-9127—The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-EPSS 5.1%CVE-2015-3109—Adobe Photoshop CC before 16.0 (aka 2015.0.0) allows attackers to execute arbitrary code or cause a denial of service (memory corruption) viEPSS 5.1%