Vulnerabilities in n/a

161,455 results
CVE-2018-12600—In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted filEPSS 3.2%CVE-2016-4632—ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a deniaEPSS 3.2%CVE-2018-12599—In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted filEPSS 3.2%CVE-2014-4488—IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly validate resource-queue metadaEPSS 3.2%CVE-2014-4489—IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly initialize event queues, whichEPSS 3.2%CVE-2017-9343—In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msEPSS 3.2%CVE-1999-0974—Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.EPSS 3.2%CVE-2014-9640—oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.EPSS 3.2%CVE-2021-39537—An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.EPSS 3.2%CVE-2005-0160—Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command liEPSS 3.2%CVE-2019-20210—The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search qEPSS 3.2%CVE-2013-0247—OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cauEPSS 3.2%CVE-2018-4204—An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affecteEPSS 3.2%CVE-2002-0704—The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error mEPSS 3.2%CVE-2019-7541—Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.EPSS 3.2%CVE-2015-0278—libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified veEPSS 3.2%CVE-2000-0429—A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.EPSS 3.2%CVE-2019-16413—An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_EPSS 3.2%CVE-2020-7044—In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= toEPSS 3.2%CVE-2006-4130—PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo and EPSS 3.2%