Vulnerabilities in N/A
161,457 resultsCVE-2015-8078—Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspEPSS 2.8%CVE-2020-7719CRITICALPrototype PollutionEPSS 2.8%CVE-2018-18715—Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS.EPSS 2.8%CVE-2021-46117—jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a functionEPSS 2.8%CVE-2001-1572—The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers EPSS 2.8%CVE-2004-2017—Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inject arbitrary HTML orEPSS 2.8%CVE-2006-3602—Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrarEPSS 2.8%CVE-2021-35942CRITICALThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) whEPSS 2.8%CVE-2018-14938—An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism dEPSS 2.8%CVE-2018-18716—Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.EPSS 2.8%CVE-2016-5837—WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecEPSS 2.8%CVE-2014-4715—Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not properly detect integer EPSS 2.8%CVE-2019-16163—Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.EPSS 2.8%CVE-2022-0856—libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of ServiceEPSS 2.8%CVE-2013-0930—Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vEPSS 2.8%CVE-2005-2069—pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the clEPSS 2.8%CVE-2013-3552—Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF fileEPSS 2.8%CVE-2019-17450—find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remEPSS 2.8%CVE-2020-13112—An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure EPSS 2.8%CVE-2021-23807MEDIUMPrototype PollutionEPSS 2.8%