Vulnerabilities in n/a
161,455 resultsCVE-2020-13560HIGHA use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially craftEPSS 3.0%CVE-2021-27923—Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is notEPSS 3.0%CVE-2006-4511—Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HEPSS 3.0%CVE-2013-7422—Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackEPSS 3.0%CVE-2019-15897—beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authentication Bypass via communication with a BeeGFS metadata server (which is typicallEPSS 3.0%CVE-2007-6109—Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspeEPSS 3.0%CVE-2013-5607—Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.EPSS 3.0%CVE-2016-1344—The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (deEPSS 3.0%CVE-2016-1578—Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code viaEPSS 3.0%CVE-2021-3111—The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/expressEPSS 3.0%CVE-2020-12861—A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to executeEPSS 3.0%CVE-2006-6158—Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) EPSS 3.0%CVE-2009-4610—Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script orEPSS 3.0%CVE-2008-3265—SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQLEPSS 3.0%CVE-2024-2352MEDIUM1Panel swap baseApi.UpdateDeviceSwap command injectionEPSS 3.0%CVE-2011-1134—Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code EPSS 3.0%CVE-2015-4718—The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated userEPSS 3.0%CVE-2015-2578—Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap.EPSS 3.0%CVE-2008-2282—admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the EPSS 3.0%CVE-2003-1500—PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefiEPSS 3.0%