Vulnerabilities in N/A
159,958 resultsCVE-2011-2371—Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMEPSS 75.7%CVE-2007-0940—Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM anEPSS 75.7%CVE-2010-2729—The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,EPSS 75.6%CVE-2022-32429—An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNEPSS 75.6%CVE-2010-3275—libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an EPSS 75.5%CVE-2017-14143—The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote atEPSS 75.5%CVE-2004-2086—Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of EPSS 75.5%CVE-2010-1885—The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properEPSS 75.5%CVE-2021-20123HIGHA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet eEPSS 75.4%KEVCVE-2021-31856—A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimeEPSS 75.4%CVE-2016-3715MEDIUMThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted imEPSS 75.4%KEVCVE-2023-3643HIGHBoss Mini document file inclusionEPSS 75.4%CVE-2017-17850—An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP meEPSS 75.4%CVE-2021-3007—Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execuEPSS 75.3%CVE-2007-4279—PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP codeEPSS 75.3%CVE-2004-0397—Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitraEPSS 75.3%CVE-2019-12255—Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0EPSS 75.3%CVE-2006-4688—Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackerEPSS 75.3%CVE-2005-2668—Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_EPSS 75.2%CVE-2001-0925—The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via anEPSS 75.2%