Vulnerabilities in N/A
161,457 resultsCVE-2014-2817HIGHMicrosoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer ElevationEPSS 26.3%KEVCVE-2016-0705—Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g aEPSS 26.3%CVE-2022-38621—Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. This vulnerability allows attackEPSS 26.3%CVE-2020-8196MEDIUMImproper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and CEPSS 26.3%KEVCVE-2017-5115—Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption vEPSS 26.3%CVE-2000-0666—rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote atEPSS 26.3%CVE-2003-0820—Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro namesEPSS 26.3%CVE-2008-1544—The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP requestEPSS 26.3%CVE-2004-0202—IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier alloEPSS 26.3%CVE-2016-3282—Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, OEPSS 26.3%CVE-2020-24589CRITICALThe Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.EPSS 26.3%CVE-2004-0197—Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database querEPSS 26.3%CVE-2009-3674—Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessiEPSS 26.3%CVE-2006-3591—Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TrEPSS 26.2%CVE-2007-1946—Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crEPSS 26.2%CVE-2009-0099—The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, EPSS 26.2%CVE-2020-20277—There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 duEPSS 26.2%CVE-2012-1465—Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of serviceEPSS 26.2%CVE-2020-17453—WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.EPSS 26.2%CVE-2011-0663HIGHMultiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attaEPSS 26.2%