Vulnerabilities in n/a

161,455 results
CVE-2017-12643—ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.EPSS 2.9%CVE-2018-5265—Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatEPSS 2.9%CVE-2017-5835—libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.EPSS 2.9%CVE-2015-5382—program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitEPSS 2.9%CVE-2012-3350—SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP heEPSS 2.9%CVE-2007-1486—PHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook before 1.7.3 allows remote attackers to executeEPSS 2.9%CVE-2017-13815—An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "file" product. VersEPSS 2.9%CVE-2021-33623—The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS)EPSS 2.9%CVE-2005-1893—FlatNuke 2.5.3 allows remote attackers to obtain sensitive information via invalid parameters to certain scripts, which leaks the web documeEPSS 2.9%CVE-2020-27603—BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files.EPSS 2.9%CVE-2014-3630—XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remEPSS 2.9%CVE-2017-13846—An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "PCRE" product. VersEPSS 2.9%CVE-2010-0092—Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 aEPSS 2.9%CVE-2019-15052CRITICALThe HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30EPSS 2.9%CVE-2012-0809—Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via formatEPSS 2.9%CVE-2019-20025—Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with EPSS 2.9%CVE-2011-0896—Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of sEPSS 2.9%CVE-2017-18013—In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.EPSS 2.9%CVE-2020-12672—GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.EPSS 2.9%CVE-2007-3467—Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a deniaEPSS 2.9%