Vulnerabilities in N/A
161,281 resultsCVE-2016-4219—Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attEPSS 4.3%CVE-2016-4217—Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attEPSS 4.3%CVE-2018-1000544—rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write aEPSS 4.3%CVE-2019-8285—Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary coEPSS 4.3%CVE-2020-7626—karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.EPSS 4.3%CVE-2009-3383—Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denialEPSS 4.3%CVE-2008-6916—Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly invEPSS 4.3%CVE-2014-2706—Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crasEPSS 4.3%CVE-2017-9775—Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application EPSS 4.3%CVE-2019-16693—phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.EPSS 4.3%CVE-2007-2136—Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting EPSS 4.3%CVE-2016-9165—The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure ManaEPSS 4.3%CVE-2014-5380—Grand MA 300 allows retrieval of the access PIN from sniffed data.EPSS 4.3%CVE-2013-5755—config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEEPSS 4.3%CVE-2006-2550—perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executedEPSS 4.3%CVE-2019-18830—Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose theEPSS 4.3%CVE-2013-7025—Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global ManagEPSS 4.3%CVE-2008-4795—The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackeEPSS 4.3%CVE-2005-4402—Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arEPSS 4.3%CVE-2017-14265—A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a reEPSS 4.3%