Vulnerabilities in N/A
161,455 resultsCVE-2018-15839—D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.EPSS 44.9%CVE-2023-44466—An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffEPSS 44.9%CVE-2014-9163HIGHStack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.EPSS 44.9%KEVCVE-1999-0736—The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.EPSS 44.8%CVE-2008-0144—PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via EPSS 44.8%CVE-2003-0150—MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" EPSS 44.8%CVE-2023-35042—GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteraEPSS 44.8%CVE-2018-15535—/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be withiEPSS 44.8%CVE-2015-5561—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before EPSS 44.8%CVE-2015-5556—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before EPSS 44.8%CVE-2015-5557—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before EPSS 44.8%CVE-2015-5550—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before EPSS 44.8%CVE-2015-5551—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before EPSS 44.8%CVE-2007-6165—Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment contaiEPSS 44.7%CVE-2019-16891—Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.EPSS 44.7%CVE-2015-2425HIGHMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafEPSS 44.7%KEVCVE-2014-0231—The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a deniEPSS 44.7%CVE-2000-0868—The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cEPSS 44.7%CVE-2020-5802—An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureEPSS 44.7%CVE-2006-6027—Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary coEPSS 44.7%