Vulnerabilities in N/A

161,126 results
CVE-2011-3271—Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code orEPSS 10.8%CVE-2008-3282HIGHInteger overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, EPSS 10.8%CVE-2007-1733—Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (1) /cgi-bin/ or (2) EPSS 10.8%CVE-2013-0809—Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 UEPSS 10.8%CVE-2001-0013—Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.EPSS 10.8%CVE-2012-3236—fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a mEPSS 10.7%CVE-2019-19924—SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindoEPSS 10.7%CVE-2005-0500—Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popupEPSS 10.7%CVE-2013-1616—The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injEPSS 10.7%CVE-2010-0024—The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 20EPSS 10.7%CVE-2019-16702—Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /LogiEPSS 10.7%CVE-2010-0288—A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote aEPSS 10.7%CVE-2007-3806—The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an inEPSS 10.7%CVE-2005-0066—The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router iEPSS 10.7%CVE-2010-2011—Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier foEPSS 10.7%CVE-2009-2902—Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-direEPSS 10.7%CVE-2004-0194—Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary codeEPSS 10.7%CVE-2007-4990—The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QuerEPSS 10.7%CVE-2018-20218—An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell commanEPSS 10.7%CVE-2014-9160—Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attacEPSS 10.7%