Vulnerabilities in N/A
161,455 resultsCVE-2013-5607—Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.EPSS 3.0%CVE-2007-6109—Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspeEPSS 3.0%CVE-2006-4511—Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HEPSS 3.0%CVE-2021-3111—The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/expressEPSS 3.0%CVE-2016-1578—Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code viaEPSS 3.0%CVE-2019-14307HIGHSeveral Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial ofEPSS 3.0%CVE-2016-1344—The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (deEPSS 3.0%CVE-2013-7422—Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackEPSS 3.0%CVE-2019-14305HIGHSeveral Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, EPSS 3.0%CVE-2021-27923—Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is notEPSS 3.0%CVE-2011-1134—Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code EPSS 3.0%CVE-2020-12861—A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to executeEPSS 3.0%CVE-2006-6158—Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) EPSS 3.0%CVE-2008-3265—SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQLEPSS 3.0%CVE-2009-4610—Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script orEPSS 3.0%CVE-2024-2352MEDIUM1Panel swap baseApi.UpdateDeviceSwap command injectionEPSS 3.0%CVE-2015-3442—Soreco Xpert.Line 3.0 allows local users to spoof users and consequently gain privileges by intercepting a Windows API call.EPSS 3.0%CVE-2008-2282—admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the EPSS 3.0%CVE-2015-4718—The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated userEPSS 3.0%CVE-2003-1500—PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefiEPSS 3.0%