Vulnerabilities in n/a

161,289 results
CVE-2016-10126—Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and EPSS 4.0%CVE-2019-11541HIGHIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentEPSS 4.0%CVE-2021-40150—The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accEPSS 4.0%CVE-2020-35716—Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service (segmentation fault) via a lEPSS 4.0%CVE-2019-3953—Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sendinEPSS 4.0%CVE-2020-11467CRITICALAn issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/EPSS 4.0%CVE-2008-3615—ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uniEPSS 4.0%CVE-2008-3628—Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) vEPSS 4.0%CVE-2007-1225—The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might aEPSS 4.0%CVE-2007-3251—Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and execute arbitrary loEPSS 4.0%CVE-2020-36189—FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.EPSS 4.0%CVE-2018-6180—A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts.EPSS 4.0%CVE-2016-7446—Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown veEPSS 4.0%CVE-2002-1663—The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a EPSS 4.0%CVE-2006-2040—Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat,EPSS 4.0%CVE-2020-25866—In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for cEPSS 4.0%CVE-2011-0935—The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers toEPSS 4.0%CVE-2011-2593—Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for EPSS 4.0%CVE-2018-16134—Cybrotech CyBroHttpServer 1.0.3 allows XSS via a URI.EPSS 4.0%CVE-2006-1874—Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors in the Oracle SpatiaEPSS 4.0%