Vulnerabilities in n/a

161,455 results
CVE-2022-31659—VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and netEPSS 3.0%CVE-2022-26520—In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary EPSS 3.0%CVE-2014-0187—The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to byEPSS 3.0%CVE-2012-4091—The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2)EPSS 3.0%CVE-2006-2431—Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application ServEPSS 3.0%CVE-2015-0582—The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traEPSS 3.0%CVE-2010-3860—IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as publEPSS 3.0%CVE-2010-3551—Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allowEPSS 3.0%CVE-2010-3548—Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5EPSS 3.0%CVE-1999-0276—mSQL v2.0.1 and below allows remote execution through a buffer overflow.EPSS 3.0%CVE-2018-11355—In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for paEPSS 3.0%CVE-2016-7531—MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file.EPSS 3.0%CVE-2019-17526—An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context of an internet facinEPSS 3.0%CVE-2001-1211—Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information fEPSS 3.0%CVE-2011-3458—QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to executEPSS 3.0%CVE-2019-9433—In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure witEPSS 3.0%CVE-2018-15910—In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams EPSS 3.0%CVE-2023-29922MEDIUMPowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.EPSS 3.0%CVE-2018-15986—Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earEPSS 3.0%CVE-2007-4521—Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a deniEPSS 3.0%