Vulnerabilities in N/A
161,395 resultsCVE-2019-15916—An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, whichEPSS 3.9%CVE-2020-7631—diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument.EPSS 3.9%CVE-2011-0579—Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to obtain EPSS 3.9%CVE-2014-1481—Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypaEPSS 3.9%CVE-2014-0495—Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cauEPSS 3.9%CVE-2004-1370—Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execEPSS 3.9%CVE-2015-6518—Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via thEPSS 3.9%CVE-2007-6067—Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 befoEPSS 3.9%CVE-2018-10068—The jDownloads extension before 3.2.59 for Joomla! has XSS.EPSS 3.9%CVE-2017-11548—The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruptionEPSS 3.9%CVE-2018-6356—Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs EPSS 3.9%CVE-2005-2315—Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of larEPSS 3.9%CVE-2015-7754—Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crashEPSS 3.9%CVE-2018-1000656—The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in LargeEPSS 3.9%CVE-2016-6352—The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write andEPSS 3.9%CVE-2016-5440—Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x bEPSS 3.9%CVE-2013-5884—Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect cEPSS 3.9%CVE-2014-0368—Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiaEPSS 3.9%CVE-2002-1042—Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when runnEPSS 3.9%CVE-2015-1000006—Remote file download vulnerability in recent-backups v0.7 wordpress pluginEPSS 3.9%