Vulnerabilities in n/a

161,132 results
CVE-2004-1666—Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newEPSS 9.9%CVE-2007-5331—Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, EPSS 9.9%CVE-2015-1126—WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the EPSS 9.9%CVE-2014-0033—org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting whEPSS 9.9%CVE-2018-20159—i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated uEPSS 9.9%CVE-2000-0012—Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.EPSS 9.9%CVE-2016-5699—CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x beEPSS 9.9%CVE-2015-1130HIGHThe XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privilegEPSS 9.9%KEVCVE-2021-3193—Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenEPSS 9.9%CVE-2008-2468—Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 anEPSS 9.9%CVE-2020-25780—In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal cEPSS 9.9%CVE-2013-6231—SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP scriptEPSS 9.9%CVE-2007-1216—Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIEPSS 9.9%CVE-2015-6037—Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, EEPSS 9.9%CVE-2017-14746—Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.EPSS 9.9%CVE-2013-1537—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlierEPSS 9.9%CVE-2006-0647—LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a deniEPSS 9.9%CVE-2004-2347—blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|'EPSS 9.9%CVE-2000-0594—BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an inEPSS 9.9%CVE-2016-0779—The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a EPSS 9.9%