Vulnerabilities in n/a

161,457 results
CVE-2016-0815—The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.EPSS 2.8%CVE-2016-0816—mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptiEPSS 2.8%CVE-2016-0838—Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a nEPSS 2.8%CVE-2015-6550—bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup AppliaEPSS 2.8%CVE-2016-0835—decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a deniaEPSS 2.8%CVE-2019-11213—In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a resEPSS 2.8%CVE-2016-1779—WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location dEPSS 2.8%CVE-2017-10144—Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). The supEPSS 2.8%CVE-2022-22723—A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and EPSS 2.8%CVE-2022-0725—A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information ExpoEPSS 2.8%CVE-2012-0865—Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and coEPSS 2.8%CVE-2006-5939—Grisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers a diEPSS 2.8%CVE-2020-7708CRITICALPrototype PollutionEPSS 2.8%CVE-2002-1997—ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing EPSS 2.8%CVE-2022-35132HIGHUsermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module.EPSS 2.8%CVE-2012-4517—ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of sEPSS 2.8%CVE-2004-1383—Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements viaEPSS 2.8%CVE-2016-0607—Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown EPSS 2.8%CVE-2020-0380—In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code eEPSS 2.8%CVE-2013-5663—The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to EPSS 2.8%