Vulnerabilities in N/A

161,399 results
CVE-1999-1128—Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automaticallyEPSS 3.6%CVE-2017-5372—The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system EPSS 3.6%CVE-2020-11909CRITICALThe Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.EPSS 3.6%CVE-2011-2984—Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the droppiEPSS 3.6%CVE-2007-5608—The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allEPSS 3.6%CVE-2021-23449CRITICALSandbox BypassEPSS 3.6%CVE-2017-10803—In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the DEPSS 3.6%CVE-2006-3705—Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for StatiEPSS 3.6%CVE-2018-18066HIGHsnmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attackEPSS 3.6%CVE-2020-28911—Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fuEPSS 3.6%CVE-2009-1656—Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7EPSS 3.6%CVE-2008-1403—Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remotEPSS 3.6%CVE-2002-0399—Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary fEPSS 3.6%CVE-2019-12460—Web Port 1.19.1 allows XSS via the /access/setup type parameter.EPSS 3.6%CVE-2012-2845—Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of sEPSS 3.6%CVE-2019-20839—libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.EPSS 3.6%CVE-2020-10969HIGHFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEPSS 3.6%CVE-2013-5754—The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master passwoEPSS 3.6%CVE-2013-4122—Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemeEPSS 3.6%CVE-2004-1659—Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, JourEPSS 3.6%