Vulnerabilities in n/a

161,276 results
CVE-2018-14879HIGHThe command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().EPSS 4.7%CVE-2019-19317—lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to caEPSS 4.7%CVE-2014-0454—Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrEPSS 4.7%CVE-2017-6214—The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinEPSS 4.7%CVE-2017-6999—An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is afEPSS 4.7%CVE-2005-3186—Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM fileEPSS 4.7%CVE-2017-6997—An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is afEPSS 4.7%CVE-2005-1110—Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbiEPSS 4.7%CVE-2000-0128—The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.EPSS 4.7%CVE-2009-3609—Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdEPSS 4.7%CVE-2006-4134—Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remEPSS 4.7%CVE-2007-0271—Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component anEPSS 4.7%CVE-2009-1030—Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) beforeEPSS 4.7%CVE-2019-10902—In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.EPSS 4.7%CVE-2022-38296—Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager.EPSS 4.7%CVE-2015-4412—BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial EPSS 4.7%CVE-2014-9608—Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.xEPSS 4.7%CVE-2007-5230—admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform EPSS 4.7%CVE-2020-13259—A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauthenticated, remote atEPSS 4.7%CVE-2015-5091—Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and AcrobEPSS 4.7%