Vulnerabilities in n/a

161,276 results
CVE-2018-7704—SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a replyEPSS 4.6%CVE-2015-5208—Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.EPSS 4.6%CVE-2000-0989—Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execEPSS 4.6%CVE-2009-3077—Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree eleEPSS 4.6%CVE-2009-0778—The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not propeEPSS 4.6%CVE-2015-8608—The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and poEPSS 4.6%CVE-2004-2429—Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to execute arbitrary codeEPSS 4.6%CVE-2016-1834HIGHHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS EPSS 4.6%CVE-2017-5868—CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers anEPSS 4.6%CVE-2015-8140—The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.EPSS 4.6%CVE-2018-3757—Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter.EPSS 4.6%CVE-2019-11537—In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if anEPSS 4.6%CVE-2012-1128—FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of servEPSS 4.6%CVE-2006-3702—Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vecEPSS 4.6%CVE-2007-6310—Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HEPSS 4.6%CVE-2010-4015—Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.EPSS 4.6%CVE-2005-0706—Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causEPSS 4.6%CVE-2016-3120—The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x befEPSS 4.6%CVE-2008-5754—Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-EPSS 4.6%CVE-2010-0990—Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01EPSS 4.6%