Vulnerabilities in n/a
161,189 resultsCVE-2001-1586—Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../EPSS 8.4%CVE-2020-36184HIGHFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.toEPSS 8.4%CVE-2011-2895—The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compressEPSS 8.4%CVE-2006-3587—Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary commands via a malformed EPSS 8.4%CVE-2000-0405—Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.EPSS 8.4%CVE-2002-0978—Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary EPSS 8.3%CVE-2018-4877—A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer iEPSS 8.3%CVE-2005-1266—Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a messagEPSS 8.3%CVE-2018-10548—An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remotEPSS 8.3%CVE-2017-1000029—Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible toEPSS 8.3%CVE-2013-0418—Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent aEPSS 8.3%CVE-2022-25322—ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.EPSS 8.3%CVE-2022-28005—An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuEPSS 8.3%CVE-2002-1145—The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and MiEPSS 8.3%CVE-2003-1129—Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial EPSS 8.3%CVE-2015-1860—Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers tEPSS 8.3%CVE-2015-3313—SQL injection vulnerability in WordPress Community Events plugin before 1.4.EPSS 8.3%CVE-2014-8393—DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.EPSS 8.3%CVE-2002-0681—Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a UREPSS 8.3%CVE-2007-0197—Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary codEPSS 8.3%