Vulnerabilities in n/a

161,143 results
CVE-2018-12292—A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.EPSS 8.8%CVE-2018-18759—Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.EPSS 8.8%CVE-2014-10079—In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of thEPSS 8.7%CVE-2023-31902CRITICALRPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).EPSS 8.7%CVE-2013-4338—wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackEPSS 8.7%CVE-2003-1260—Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.EPSS 8.7%CVE-2007-1998—Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email fEPSS 8.7%CVE-2009-0885—Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (apEPSS 8.7%CVE-2011-3489—RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) viaEPSS 8.7%CVE-2021-26814—Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/fileEPSS 8.7%CVE-2022-29153—HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent fEPSS 8.7%CVE-2007-0886—Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and posEPSS 8.7%CVE-2010-1028—Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 EPSS 8.7%CVE-2019-16199—eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web iEPSS 8.7%CVE-2006-4877—Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program varEPSS 8.7%CVE-2012-2733—java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28EPSS 8.7%CVE-2017-15271—A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to EPSS 8.7%CVE-2015-0304—Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11EPSS 8.7%CVE-2015-0309—Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11EPSS 8.7%CVE-2008-2684—The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code EPSS 8.7%