Vulnerabilities in N/A
161,455 resultsCVE-2017-9115—In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary EPSS 3.3%CVE-2010-1188—Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening sockEPSS 3.3%CVE-2014-0384—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticateEPSS 3.3%CVE-2022-25313MEDIUMIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.EPSS 3.3%CVE-2015-1495—Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the OEPSS 3.3%CVE-2006-3736—PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attacEPSS 3.3%CVE-2009-0973—Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availabilityEPSS 3.3%CVE-2018-8550—An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects WiEPSS 3.3%CVE-2018-14057—Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the X-pimcore-EPSS 3.3%CVE-2007-4524—PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in EPSS 3.3%CVE-2011-2091—Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown veEPSS 3.3%CVE-2017-5200—Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on EPSS 3.3%CVE-2019-11070—WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (EPSS 3.3%CVE-2011-2260—Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confEPSS 3.3%CVE-2013-1453—plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP EPSS 3.3%CVE-2008-4934—The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from EPSS 3.3%CVE-2008-1256—The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access.EPSS 3.3%CVE-2007-1078—PHP remote file inclusion vulnerability in index.php in FlashGameScript 1.5.4 allows remote attackers to execute arbitrary PHP code via a UREPSS 3.3%CVE-2019-19816—In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write acceEPSS 3.3%CVE-2022-40772MEDIUMZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive dataEPSS 3.3%