Vulnerabilities in n/a
161,457 resultsCVE-2019-17601—In MiniShare 1.4.1, there is a stack-based buffer overflow via an HTTP CONNECT request, which allows an attacker to achieve arbitrary code eEPSS 2.8%CVE-2017-3029—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabiliEPSS 2.8%CVE-2014-5090—admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the EPSS 2.8%CVE-2009-1582—Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intEPSS 2.8%CVE-2006-5428—rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackeEPSS 2.8%CVE-2019-10691—The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate witEPSS 2.8%CVE-2020-28993—A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitatEPSS 2.8%CVE-2012-4392—index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a craEPSS 2.8%CVE-2014-9001—reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters EPSS 2.8%CVE-2017-3020—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabiliEPSS 2.8%CVE-2017-14742—Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely.EPSS 2.8%CVE-2008-3458—Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to rEPSS 2.8%CVE-2007-4330—PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in tEPSS 2.8%CVE-2014-4480—Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access EPSS 2.8%CVE-2005-2257—The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_EPSS 2.8%CVE-2020-13531HIGHA use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specially crafted file canEPSS 2.8%CVE-2009-1107—The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,EPSS 2.8%CVE-2006-6381—Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. (dot dot) in EPSS 2.8%CVE-2015-4418—Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for reEPSS 2.8%CVE-2001-0163—Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connEPSS 2.8%