Vulnerabilities in n/a

161,276 results
CVE-2010-2869—IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial ofEPSS 4.7%CVE-2016-6199—ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.EPSS 4.7%CVE-2018-0293—A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI coEPSS 4.7%CVE-2007-2173—Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before EPSS 4.7%CVE-2021-20094—A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issEPSS 4.7%CVE-2006-3292—SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with thEPSS 4.7%CVE-2006-4806—Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrarEPSS 4.7%CVE-2012-1239—The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, EPSS 4.7%CVE-2013-4125—The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router AdvEPSS 4.7%CVE-2021-45960HIGHIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehEPSS 4.7%CVE-2014-9162—Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attEPSS 4.7%CVE-2014-6559—Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentialiEPSS 4.7%CVE-2007-1544—Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remoEPSS 4.7%CVE-2016-4485—The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows atEPSS 4.7%CVE-2019-17514—library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as deEPSS 4.7%CVE-2012-4245—The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via theEPSS 4.7%CVE-2003-0632—Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 thEPSS 4.7%CVE-2018-10193—LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resourcEPSS 4.7%CVE-2021-22934—A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device EPSS 4.7%CVE-2021-46837—res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7,EPSS 4.7%