Vulnerabilities in n/a

161,455 results
CVE-2022-21724HIGHUnchecked Class Instantiation when providing Plugin ClassesEPSS 3.1%CVE-2015-4209—Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain seEPSS 3.1%CVE-2016-7520—Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crEPSS 3.1%CVE-2007-0987—Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files viaEPSS 3.1%CVE-2006-3809—Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilegEPSS 3.1%CVE-2004-2547—NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify tEPSS 3.1%CVE-2011-2485—The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, wEPSS 3.1%CVE-2019-13193—Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parseEPSS 3.1%CVE-2022-44356HIGHWAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allowEPSS 3.1%CVE-2011-1807—Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vecEPSS 3.1%CVE-2022-46641CRITICALD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIEPSS 3.1%CVE-2022-46642CRITICALD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgEPSS 3.1%CVE-2016-4598—QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viEPSS 3.1%CVE-2007-4988—Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary codeEPSS 3.1%CVE-2008-2876—Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. EPSS 3.1%CVE-2008-2579—Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1,EPSS 3.1%CVE-2006-1629—OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD enviroEPSS 3.1%CVE-2011-0206—Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute EPSS 3.1%CVE-2010-4314—Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute codeEPSS 3.1%CVE-2005-3058—Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker viaEPSS 3.1%