Vulnerabilities in n/a
161,132 resultsCVE-2007-3164—Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the EPSS 9.9%CVE-2010-3879—FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesysteEPSS 9.8%CVE-2009-4623—Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via aEPSS 9.8%CVE-2006-2323—Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHPEPSS 9.8%CVE-2001-1343—ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacterEPSS 9.8%CVE-2016-5399—The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a deniEPSS 9.8%CVE-2023-27100CRITICALImproper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CEEPSS 9.8%CVE-2015-3269—Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.EPSS 9.8%CVE-2020-11581—An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, andEPSS 9.8%CVE-2011-0598—Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X aEPSS 9.8%CVE-2013-3355—Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a EPSS 9.8%CVE-2019-8390—qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.EPSS 9.8%CVE-2018-4999—Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier have an Out-of-bounEPSS 9.8%CVE-2019-16294—SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafteEPSS 9.8%CVE-2010-0071—Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote atEPSS 9.8%CVE-2022-38555—Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.EPSS 9.8%CVE-2015-1421—Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attacEPSS 9.8%CVE-2011-0708—exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a deEPSS 9.8%CVE-2006-2894—Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8EPSS 9.8%CVE-2017-15361—The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, beforEPSS 9.8%