Vulnerabilities in n/a
161,083 resultsCVE-2017-1000373—The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causeEPSS 13.4%CVE-2006-5835—The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authenticatEPSS 13.4%CVE-2017-10661—Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list cEPSS 13.4%CVE-2010-1653—Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attackeEPSS 13.4%CVE-2019-9960—The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.EPSS 13.4%CVE-2022-26159—The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/serviceEPSS 13.4%CVE-2015-8556—Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.EPSS 13.4%CVE-2011-4034—Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30EPSS 13.4%CVE-2018-1000001—In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination bufferEPSS 13.4%CVE-2004-1437—Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrEPSS 13.4%CVE-2010-3342—Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access contenEPSS 13.4%CVE-2010-3348—Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access contenEPSS 13.4%CVE-2014-0527—Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers toEPSS 13.4%CVE-2006-3877—Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac alloEPSS 13.4%CVE-2016-9796—Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30EPSS 13.4%CVE-2008-7220—Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests"EPSS 13.4%CVE-2016-0164—Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viaEPSS 13.4%CVE-2016-3241—Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) EPSS 13.4%CVE-2016-3243—Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viaEPSS 13.4%CVE-2012-0010—Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to EPSS 13.4%