Vulnerabilities in n/a

161,457 results
CVE-2010-0233—Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and ServerEPSS 2.7%CVE-2010-0190—Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows EPSS 2.7%CVE-2013-0389—Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated usEPSS 2.7%CVE-2008-0347—Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.EPSS 2.7%CVE-2008-0346—Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknowEPSS 2.7%CVE-2008-5560—PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the dEPSS 2.7%CVE-1999-0975—The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extenEPSS 2.7%CVE-2015-4443—Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and AcrobEPSS 2.7%CVE-2006-4374—IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a crafted ANI image file, EPSS 2.7%CVE-2019-13301—ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.EPSS 2.7%CVE-2015-1916HIGHUnspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TEPSS 2.7%CVE-2021-36520HIGHA SQL injection vulnerability in I-Tech Trainsmart r1044 exists via a evaluation/assign-evaluation?id= URI.EPSS 2.7%CVE-2015-4444—Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and AcrobEPSS 2.7%CVE-2009-3559—main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependenEPSS 2.7%CVE-2008-5218—ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cEPSS 2.7%CVE-2018-19911—FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/syEPSS 2.7%CVE-2005-4886—The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denEPSS 2.7%CVE-2007-3714—Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read arbitrary files via a .. (dot dot) in tEPSS 2.7%CVE-2008-1557—BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/_b/contentFiles/gBphpInfo.EPSS 2.7%CVE-2019-13309—ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MaEPSS 2.7%