Vulnerabilities in n/a
161,395 resultsCVE-2005-1307—The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and executeEPSS 3.7%CVE-2002-0067—Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote aEPSS 3.7%CVE-2002-0560—PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stoEPSS 3.7%CVE-2023-39110—rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulneraEPSS 3.7%CVE-2015-0817—The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly deEPSS 3.7%CVE-2004-0938—FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute withoEPSS 3.7%CVE-2022-42915HIGHcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection EPSS 3.7%CVE-2019-10746—mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adEPSS 3.7%CVE-2015-8028—Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to execute arbitrary code via a crafted (1) 3DM orEPSS 3.6%CVE-2004-0222—Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certEPSS 3.6%CVE-2006-3862—Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute aEPSS 3.6%CVE-1999-1488—sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.EPSS 3.6%CVE-2015-7017—CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause aEPSS 3.6%CVE-2002-1396—Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or EPSS 3.6%CVE-2011-2105—Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial ofEPSS 3.6%CVE-2004-0221—isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload cEPSS 3.6%CVE-2017-18214—The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerEPSS 3.6%CVE-2007-5018—Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in aEPSS 3.6%CVE-2006-1793—Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter tEPSS 3.6%CVE-2011-1935—pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might aEPSS 3.6%