Vulnerabilities in N/A

161,400 results
CVE-2021-33196—In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReaEPSS 3.5%CVE-2012-3017—Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and servEPSS 3.5%CVE-2015-2366—win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 GoEPSS 3.5%CVE-2009-3748—Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and EmaiEPSS 3.5%CVE-2016-9243—HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.EPSS 3.5%CVE-2012-3016—Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transitiEPSS 3.5%CVE-2015-2365—win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1EPSS 3.5%CVE-2016-7939—The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.EPSS 3.5%CVE-2012-3989—Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable duEPSS 3.5%CVE-2016-7924—The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().EPSS 3.5%CVE-2009-1364—Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (aEPSS 3.5%CVE-2019-9743—An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI componentEPSS 3.5%CVE-2022-48522—In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalatEPSS 3.5%CVE-2005-2366—Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop)EPSS 3.5%CVE-2017-13010CRITICALThe BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().EPSS 3.5%CVE-2017-12985CRITICALThe IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().EPSS 3.5%CVE-2016-7530—The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) EPSS 3.5%CVE-2018-13982—Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template codeEPSS 3.5%CVE-2018-20795—tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through thEPSS 3.5%CVE-2001-0513—Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, whEPSS 3.5%