Vulnerabilities in n/a
161,455 resultsCVE-2011-4259—Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in anEPSS 2.9%CVE-2007-5552—Integer overflow in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: as of 20071016, the only disEPSS 2.9%CVE-2014-3136—Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack tEPSS 2.9%CVE-2020-20138—Cross Site Scripting (XSS) vulnerability in the Showtime2 Slideshow module in CMS Made Simple (CMSMS) 2.2.4.EPSS 2.9%CVE-2000-0643—Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.EPSS 2.9%CVE-2022-39833HIGHFileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported APIEPSS 2.9%CVE-2005-4635—The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, whEPSS 2.9%CVE-2016-7519—The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a craEPSS 2.9%CVE-2016-10727—camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data EPSS 2.9%CVE-2010-1640—Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crasEPSS 2.9%CVE-2011-4251—RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file.EPSS 2.9%CVE-2011-4260—RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.EPSS 2.9%CVE-2013-6043—The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on wheEPSS 2.9%CVE-2011-4257—The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data.EPSS 2.9%CVE-2011-4247—RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream.EPSS 2.9%CVE-2013-1561—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earEPSS 2.9%CVE-2018-18878—In firmware version MS_2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remEPSS 2.9%CVE-2016-2785—Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers toEPSS 2.9%CVE-2010-1639—The cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformedEPSS 2.9%CVE-2011-0162—Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackEPSS 2.9%