Vulnerabilities in n/a
161,283 resultsCVE-2015-7554—The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or EPSS 4.2%CVE-2014-0892—IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes itEPSS 4.2%CVE-1999-0372—The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.EPSS 4.2%CVE-2021-20083—Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object 2.2.3 allows a malicEPSS 4.2%CVE-2009-2177—code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory traveEPSS 4.2%CVE-2006-3793—PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP EPSS 4.2%CVE-2015-2218—Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio PlaEPSS 4.2%CVE-2010-3270—Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticaEPSS 4.2%CVE-2002-2417—acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to EPSS 4.2%CVE-2018-18461—The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary EPSS 4.2%CVE-2015-7179—The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x befoEPSS 4.2%CVE-2005-4216—The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service (aEPSS 4.2%CVE-2017-3051—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption EPSS 4.2%CVE-2010-0552—Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary cEPSS 4.2%CVE-2017-3050—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption EPSS 4.2%CVE-2008-4482—The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via EPSS 4.2%CVE-2010-4232—The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102EPSS 4.2%CVE-2018-19977—A command injection (missing input validation, escaping) in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3EPSS 4.2%CVE-2002-0908—Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary fileEPSS 4.2%CVE-2020-14155—libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.EPSS 4.2%