Vulnerabilities in N/A

161,276 results
CVE-2010-2009—Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allowsEPSS 4.8%CVE-2017-5356—Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formattingEPSS 4.8%CVE-2017-13855—An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affectEPSS 4.8%CVE-2018-14442—Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.EPSS 4.8%CVE-2016-6371—Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allowEPSS 4.8%CVE-2021-34082—OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allEPSS 4.8%CVE-2018-11410—An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers tEPSS 4.8%CVE-2009-1198—Cross-site scripting (XSS) vulnerability in Apache jUDDI before 2.0 allows remote attackers to inject arbitrary web script or HTML via the dEPSS 4.8%CVE-2019-9569—Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to execute arbitrary codeEPSS 4.8%CVE-2020-5806—An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequestEPSS 4.8%CVE-2015-3315—Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary filesEPSS 4.8%CVE-2011-4513—Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMIEPSS 4.8%CVE-2009-0914—Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption.EPSS 4.8%CVE-2001-1413—Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundariesEPSS 4.8%CVE-2023-0935MEDIUMDolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injectionEPSS 4.8%CVE-2004-2334—Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (EPSS 4.8%CVE-1999-0827—By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame sEPSS 4.8%CVE-2005-3959—Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML vEPSS 4.8%CVE-2008-0138—PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is disableEPSS 4.8%CVE-2010-0001—Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows EPSS 4.8%