Vulnerabilities in N/A

161,455 results
CVE-2017-13725—The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().EPSS 3.3%CVE-2004-1017—Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.EPSS 3.3%CVE-2005-4210—Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a denial of service (pEPSS 3.3%CVE-2015-1575—Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via EPSS 3.3%CVE-2010-1823—Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial EPSS 3.3%CVE-2022-48165—An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers toEPSS 3.3%CVE-2017-12896CRITICALThe ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().EPSS 3.3%CVE-2018-18586—chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative patEPSS 3.3%CVE-2017-13687CRITICALThe Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().EPSS 3.3%CVE-2019-11411—An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer oveEPSS 3.3%CVE-2017-12987—The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().EPSS 3.3%CVE-2017-12899CRITICALThe DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().EPSS 3.3%CVE-2017-13020CRITICALThe VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().EPSS 3.3%CVE-2016-1219—Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.EPSS 3.3%CVE-2014-8380—Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP RefererEPSS 3.3%CVE-2014-4035—Cross-site scripting (XSS) vulnerability in booking_details.php in Best Soft Inc. (BSI) Advance Hotel Booking System 2.0 allows remote attacEPSS 3.3%CVE-2016-8689—The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (outEPSS 3.3%CVE-2006-0036—ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows remote attackers to cEPSS 3.3%CVE-2008-2369—manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect tEPSS 3.3%CVE-2002-1229—Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwoEPSS 3.3%