Vulnerabilities in n/a
161,290 resultsCVE-2005-2210—Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL.EPSS 4.0%CVE-2005-2644—Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possiblEPSS 4.0%CVE-2009-2052—Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1EPSS 4.0%CVE-2007-4568—Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitraEPSS 4.0%CVE-2020-27994—SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.EPSS 4.0%CVE-2017-6550—Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via EPSS 4.0%CVE-2002-0465—Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbEPSS 4.0%CVE-2015-4836—Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect avaEPSS 4.0%CVE-2022-29323—D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.EPSS 4.0%CVE-2022-29321—D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.EPSS 4.0%CVE-2022-29324—D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.EPSS 4.0%CVE-2022-21190HIGHPrototype PollutionEPSS 4.0%CVE-2018-16451CRITICALThe SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.EPSS 4.0%CVE-2005-1004—Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web scriEPSS 4.0%CVE-2013-3006—Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentialityEPSS 4.0%CVE-2013-3007—Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackerEPSS 4.0%CVE-2013-3008—Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentialityEPSS 4.0%CVE-2013-3010—Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackerEPSS 4.0%CVE-2018-4876—Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref funEPSS 4.0%CVE-2020-10108—In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignoreEPSS 4.0%