Vulnerabilities in n/a
161,455 resultsCVE-2002-0290—Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument.EPSS 3.3%CVE-2002-0260—Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, whicEPSS 3.3%CVE-2002-0017—Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP requestEPSS 3.3%CVE-2015-7369—The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which EPSS 3.3%CVE-2018-17000—A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 alEPSS 3.3%CVE-2016-7797—Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an EPSS 3.3%CVE-2002-0663—Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackEPSS 3.3%CVE-2015-2091—The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify reqEPSS 3.3%CVE-2002-1000—Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a longEPSS 3.3%CVE-2011-1929—lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header nEPSS 3.3%CVE-2002-0360—Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gEPSS 3.3%CVE-2016-3632—The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-boundEPSS 3.3%CVE-2002-1321—Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia IntegEPSS 3.3%CVE-2012-2919—Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary fiEPSS 3.3%CVE-2019-10048—The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation and sanitization of uEPSS 3.2%CVE-2022-34298—The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."EPSS 3.2%CVE-2014-8084—Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and EPSS 3.2%CVE-2006-3706—Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 has unknown impact and attack vectors, aka Oracle Vuln# AS01.EPSS 3.2%CVE-2021-42717—ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could resEPSS 3.2%CVE-2015-7928—eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote atEPSS 3.2%