Vulnerabilities in n/a
161,398 resultsCVE-2019-13450—In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the vEPSS 3.5%CVE-2004-2464—Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hEPSS 3.5%CVE-2011-3108—Use-after-free vulnerability in Google Chrome before 19.0.1084.52 allows remote attackers to execute arbitrary code via vectors related to tEPSS 3.5%CVE-2013-3266—The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify tEPSS 3.5%CVE-2017-13992—An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently randoEPSS 3.5%CVE-2017-0379—Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret EPSS 3.5%CVE-2006-0383—IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service (application crash) vEPSS 3.5%CVE-2014-8170—ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat EnterpEPSS 3.5%CVE-1999-1084—The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debuEPSS 3.5%CVE-2013-1182—The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1EPSS 3.5%CVE-2010-4747—Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allowEPSS 3.5%CVE-2020-19295—A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary webEPSS 3.5%CVE-2013-2355—HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive informaEPSS 3.5%CVE-2010-2892—gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated administrators to exeEPSS 3.5%CVE-2014-2552—Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote EPSS 3.5%CVE-2019-19459—An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVEEPSS 3.5%CVE-2012-5217—HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive informaEPSS 3.5%CVE-2020-13152—A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, EPSS 3.5%CVE-1999-0037—Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.EPSS 3.5%CVE-2021-25915CRITICALPrototype pollution vulnerability in 'changeset' versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of service and may lead tEPSS 3.5%