Vulnerabilities in N/A

161,284 results
CVE-2016-5043—The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) vEPSS 4.3%CVE-2003-1516—The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, whiEPSS 4.3%CVE-2014-5181—Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attacEPSS 4.3%CVE-2013-0443—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 thEPSS 4.3%CVE-2008-3075—The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exEPSS 4.3%CVE-2015-4500—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attaEPSS 4.3%CVE-2018-4928—Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitation could lead to arbitrary EPSS 4.3%CVE-2019-6251—WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker coEPSS 4.3%CVE-2007-5560—Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: aEPSS 4.3%CVE-2019-13954—Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticEPSS 4.3%CVE-1999-0493—rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn coEPSS 4.3%CVE-2017-7618—crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, andEPSS 4.3%CVE-2018-18751—An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free iEPSS 4.3%CVE-2011-0556—The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of serviceEPSS 4.3%CVE-2016-4591—WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackersEPSS 4.3%CVE-1999-0986—The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.EPSS 4.3%CVE-2008-7061—The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 aEPSS 4.3%CVE-2011-4256—The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index valueEPSS 4.3%CVE-2017-5539—The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ..\/ tEPSS 4.3%CVE-2002-0608—Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.EPSS 4.3%