Vulnerabilities in N/A
159,958 resultsCVE-2020-25683—A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before itEPSS 86.0%CVE-2013-3893HIGHUse-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote aEPSS 85.9%KEVCVE-2020-17523—Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.EPSS 85.9%CVE-2021-31755CRITICALAn issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmacEPSS 85.8%KEVCVE-2015-0311HIGHUnspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and throuEPSS 85.8%KEVCVE-2008-5353—The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2EPSS 85.8%CVE-2015-1539—Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remotEPSS 85.8%CVE-2020-28871—Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an inEPSS 85.8%CVE-2014-3470—The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anoEPSS 85.8%CVE-2014-0226—Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-bEPSS 85.7%CVE-2021-30116CRITICALUnauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6EPSS 85.7%KEVCVE-2009-3129HIGHMicrosoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; OfficEPSS 85.7%KEVCVE-2001-0241—Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print requesEPSS 85.7%CVE-2003-0109—Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remoteEPSS 85.7%CVE-2003-0533—Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LEPSS 85.7%CVE-2020-8654—An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to rEPSS 85.6%CVE-2022-2414—Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to EPSS 85.6%CVE-2001-0803—Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execEPSS 85.6%CVE-2017-9769—A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a EPSS 85.5%CVE-2004-0330—Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to thEPSS 85.5%