Vulnerabilities in n/a
161,455 resultsCVE-2015-5235—IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers toEPSS 3.0%CVE-2010-0593—The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTEPSS 3.0%CVE-2011-0188—The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and EPSS 3.0%CVE-2012-3615—WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptioEPSS 3.0%CVE-2017-8805—Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attaEPSS 3.0%CVE-2021-34611—A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6EPSS 3.0%CVE-2021-34610—A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6EPSS 3.0%CVE-2021-45090—Stormshield Endpoint Security before 2.1.2 allows remote code execution.EPSS 3.0%CVE-2017-9345—In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/pacEPSS 3.0%CVE-2011-2150—The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which aEPSS 3.0%CVE-2009-0794—Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-JavaEPSS 3.0%CVE-2007-5684—Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files vEPSS 3.0%CVE-2018-7485—The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackerEPSS 3.0%CVE-2017-6839—Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crEPSS 3.0%CVE-2011-4137—The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries thatEPSS 3.0%CVE-2006-4609—Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.6.1, when register_gEPSS 3.0%CVE-2005-4798—Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash)EPSS 3.0%CVE-2007-1801—Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files vEPSS 3.0%CVE-2014-3354—Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG andEPSS 3.0%CVE-2021-0158MEDIUMImproper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of EPSS 3.0%