Vulnerabilities in N/A

161,275 results
CVE-2010-2214—Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or causEPSS 4.6%CVE-2010-2216—Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or causEPSS 4.6%CVE-2003-0982—Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbiEPSS 4.6%CVE-2007-1681—Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a deniEPSS 4.6%CVE-2018-20433—c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.EPSS 4.6%CVE-2000-0026—Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.EPSS 4.6%CVE-2017-6957—Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming andEPSS 4.6%CVE-2018-19531—HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEncEPSS 4.6%CVE-2018-19530—HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely EPSS 4.6%CVE-2013-5990—Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; IchEPSS 4.6%CVE-2014-5355—MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\EPSS 4.6%CVE-2013-1637—Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.EPSS 4.6%CVE-2013-1701—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird beforEPSS 4.6%CVE-2015-0249—The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute EPSS 4.6%CVE-2021-45462HIGHIn Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.EPSS 4.6%CVE-2012-2559—WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a crEPSS 4.6%CVE-2013-2443—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlierEPSS 4.6%CVE-2012-3996—TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calEPSS 4.6%CVE-2018-16045—Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earEPSS 4.6%CVE-2002-0513—The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gaEPSS 4.6%