Vulnerabilities in n/a

161,457 results
CVE-2009-0642—ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow EPSS 2.6%CVE-2017-8336—An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capaEPSS 2.6%CVE-2015-4460—Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) allEPSS 2.6%CVE-2016-9453—The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) orEPSS 2.6%CVE-2016-10692—haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It EPSS 2.6%CVE-2011-2152—The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings foEPSS 2.6%CVE-2011-1091—libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial EPSS 2.6%CVE-2021-21961CRITICALA stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-EPSS 2.6%CVE-2009-2800—Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of servicEPSS 2.6%CVE-2013-6198—Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attEPSS 2.6%CVE-2018-20712—A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1EPSS 2.6%CVE-2005-0269—The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attacEPSS 2.6%CVE-2005-0936—Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTMEPSS 2.6%CVE-2016-1629—Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unsEPSS 2.6%CVE-2020-27617—eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via paEPSS 2.6%CVE-2003-1442—The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain EPSS 2.6%CVE-2009-3293—Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incEPSS 2.6%CVE-2001-1294—Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interfEPSS 2.6%CVE-2021-21960CRITICALA stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specEPSS 2.6%CVE-2008-2121—The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection EPSS 2.6%