Vulnerabilities in n/a

161,398 results
CVE-2020-25928—The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The cEPSS 3.6%CVE-2018-20789—tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversalEPSS 3.6%CVE-2013-1591—Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dEPSS 3.6%CVE-2017-7857—FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in trueEPSS 3.6%CVE-2009-0698—Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash)EPSS 3.6%CVE-2006-5781—Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS reEPSS 3.6%CVE-2014-6119—IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 befoEPSS 3.6%CVE-2013-2602—Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote attackers to executEPSS 3.6%CVE-2012-2290—The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attaEPSS 3.6%CVE-2018-8804—WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double fEPSS 3.6%CVE-2010-3692—Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote aEPSS 3.6%CVE-2007-6480—The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, which allows remote attaEPSS 3.6%CVE-2012-0866—CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check thEPSS 3.6%CVE-2017-17619—Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.6%CVE-2018-20743—murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows rEPSS 3.6%CVE-2017-17621—Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.EPSS 3.6%CVE-2017-17622—Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.EPSS 3.6%CVE-2012-1437—The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\EPSS 3.6%CVE-2006-3701—Unspecified vulnerability in the Dictionary component in Oracle Database 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectorsEPSS 3.6%CVE-2004-0155—The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signatureEPSS 3.6%