Vulnerabilities in n/a
161,276 resultsCVE-2010-0185—The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which EPSS 4.4%CVE-2020-24285—INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx.EPSS 4.4%CVE-2020-24697—An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacEPSS 4.4%CVE-2019-14724—In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding deEPSS 4.4%CVE-2018-14495—Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issueEPSS 4.4%CVE-2007-6036—The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daeEPSS 4.4%CVE-2000-0737—The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain admEPSS 4.4%CVE-2002-0906—Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a EPSS 4.4%CVE-2014-0503—Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allEPSS 4.4%CVE-2013-1801—The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conductEPSS 4.4%CVE-2016-4059—Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a EPSS 4.4%CVE-2011-2122—Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruEPSS 4.4%CVE-2020-36244—The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely EPSS 4.4%CVE-2012-1569—The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not proEPSS 4.4%CVE-2003-0592—Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via EPSS 4.4%CVE-2007-2182—Unrestricted file upload vulnerability in forum_write.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP filEPSS 4.4%CVE-2019-16884—runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rooEPSS 4.4%CVE-2009-3605—Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possiblyEPSS 4.4%CVE-2005-0533—Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attaEPSS 4.4%CVE-2018-11233—In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnEPSS 4.4%