Vulnerabilities in N/A

161,455 results
CVE-2015-6104—The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, WiEPSS 35.3%CVE-2008-5492—Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remoEPSS 35.3%CVE-2006-3357—Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a dEPSS 35.3%CVE-2022-25236CRITICALxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.EPSS 35.3%CVE-2016-3948—Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service EPSS 35.3%CVE-2009-1528—Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for ServeEPSS 35.3%CVE-2020-35391CRITICALTenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direEPSS 35.2%CVE-2022-32417—PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.EPSS 35.2%CVE-2008-2257—Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denEPSS 35.2%CVE-2012-4244—ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attacEPSS 35.2%CVE-2007-3038—The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote EPSS 35.2%CVE-2015-1692—Microsoft Internet Explorer 7 through 11 allows user-assisted remote attackers to read the clipboard contents via crafted web script, aka "IEPSS 35.2%CVE-2015-7303—Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code viaEPSS 35.2%CVE-2020-15902—Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.EPSS 35.1%CVE-2008-1724—Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1EPSS 35.1%CVE-2010-0679—Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allowEPSS 35.1%CVE-2009-2484—Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on MEPSS 35.1%CVE-2012-6081—Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actEPSS 35.1%CVE-2012-3753—Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of serviceEPSS 35.1%CVE-2009-1531—Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 aEPSS 35.1%