Vulnerabilities in n/a

161,071 results
CVE-2020-10619—An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.EPSS 14.3%CVE-2019-18240—In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotelyEPSS 14.3%CVE-2011-1071—The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary codeEPSS 14.3%CVE-2017-6880—Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspeciEPSS 14.3%CVE-2003-0896—The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allEPSS 14.3%CVE-2021-45901—The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the usernEPSS 14.3%CVE-2015-5377—Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTEEPSS 14.3%CVE-2019-15637HIGHNumerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a EPSS 14.3%CVE-2023-47253CRITICALQualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.phEPSS 14.3%CVE-2004-2167—Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expEPSS 14.3%CVE-2002-0976—Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet EPSS 14.3%CVE-2022-29593MEDIUMrelay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need EPSS 14.3%CVE-2011-0917—Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operatiEPSS 14.3%CVE-2014-4158—Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.EPSS 14.3%CVE-2008-5828—Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote aEPSS 14.3%CVE-2015-7246—D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the twEPSS 14.3%CVE-2010-1117—Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .EPSS 14.3%CVE-2020-7473—In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releasEPSS 14.3%CVE-2012-1502—Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (EPSS 14.3%CVE-2018-11716—An issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is unauthenticated remote access to all log files of a DesEPSS 14.3%