Vulnerabilities in N/A
161,456 resultsCVE-2001-1211—Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information fEPSS 3.0%CVE-2014-0187—The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to byEPSS 3.0%CVE-2022-31659—VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and netEPSS 3.0%CVE-2021-27335—KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCoEPSS 3.0%CVE-2022-26520—In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary EPSS 3.0%CVE-2006-2431—Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application ServEPSS 3.0%CVE-2012-4091—The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2)EPSS 3.0%CVE-2019-17526—An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context of an internet facinEPSS 3.0%CVE-1999-0276—mSQL v2.0.1 and below allows remote execution through a buffer overflow.EPSS 3.0%CVE-2010-3551—Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allowEPSS 3.0%CVE-2018-11355—In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for paEPSS 3.0%CVE-2010-3548—Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5EPSS 3.0%CVE-2010-3860—IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as publEPSS 3.0%CVE-2014-0100—Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to caEPSS 3.0%CVE-2006-5860—Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to EPSS 3.0%CVE-2012-0128—HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via EPSS 3.0%CVE-2019-9433—In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure witEPSS 3.0%CVE-2018-15986—Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earEPSS 3.0%CVE-2018-15911—In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdEPSS 3.0%CVE-2011-3458—QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to executEPSS 3.0%