Vulnerabilities in N/A

161,457 results
CVE-2021-38697—SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extensiEPSS 2.8%CVE-2019-13311—ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.EPSS 2.8%CVE-2007-6235—A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malfoEPSS 2.8%CVE-2016-0699—Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remEPSS 2.8%CVE-2012-3518—The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, wEPSS 2.8%CVE-2015-8038—Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remoteEPSS 2.8%CVE-2021-30150—Composr 10.0.36 allows XSS in an XML script.EPSS 2.8%CVE-2011-0737MEDIUMAdobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveEPSS 2.8%CVE-2012-3517—Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via veEPSS 2.8%CVE-2009-3106—The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement securEPSS 2.8%CVE-2009-3292—Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity cheEPSS 2.8%CVE-2021-32936—An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from tEPSS 2.8%CVE-2008-4919—Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overEPSS 2.8%CVE-2020-7772HIGHPrototype PollutionEPSS 2.8%CVE-2015-8037—Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remoteEPSS 2.8%CVE-2018-6940—A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in cEPSS 2.8%CVE-2020-16272—The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote aEPSS 2.8%CVE-2012-4623—The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2EPSS 2.8%CVE-2010-1088—fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown EPSS 2.8%CVE-2018-17075—The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for hEPSS 2.8%