Vulnerabilities in n/a
161,112 resultsCVE-2017-17095—tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflowEPSS 10.6%CVE-2015-0054—Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer ElevationEPSS 10.6%CVE-2005-0097—The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3EPSS 10.6%CVE-2008-6080—Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remote attackers to readEPSS 10.6%CVE-2022-45957HIGHZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.EPSS 10.6%CVE-2021-31535—LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColEPSS 10.6%CVE-2019-8937—HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizzEPSS 10.6%CVE-2004-1986—Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrativEPSS 10.6%CVE-2015-7780—Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.EPSS 10.6%CVE-2019-19012—An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which EPSS 10.6%CVE-2009-0369—Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafEPSS 10.6%CVE-2014-0683—The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlierEPSS 10.6%CVE-2018-5032—Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap OverfloEPSS 10.6%CVE-2016-6330—The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allowsEPSS 10.6%CVE-2000-0287—The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameterEPSS 10.6%CVE-2019-10969—Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on theEPSS 10.6%CVE-2011-2522—Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remoEPSS 10.6%CVE-2015-4117—Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup pEPSS 10.6%CVE-2006-1990—Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary coEPSS 10.6%CVE-2021-21998—VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A malicious actor with neEPSS 10.6%