Vulnerabilities in n/a
161,189 resultsCVE-2015-4050—FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 throughEPSS 8.2%CVE-2015-2368—Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and WindowsEPSS 8.2%CVE-2008-4383—Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OSEPSS 8.2%CVE-2019-12252—In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its numEPSS 8.2%CVE-2022-37129—D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameteEPSS 8.2%CVE-2015-5347—Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModaEPSS 8.2%CVE-2009-0688—Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a deniEPSS 8.2%CVE-2011-0758—The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a deniaEPSS 8.2%CVE-2019-17080—mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because EPSS 8.2%CVE-2019-9639—An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized rEPSS 8.2%CVE-2007-2274—The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via EPSS 8.2%CVE-2013-6025—The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files vEPSS 8.2%CVE-2007-2372—admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit when administrativeEPSS 8.2%CVE-2002-1369—jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the optioEPSS 8.2%CVE-2007-3883—The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full paEPSS 8.2%CVE-2010-1219—Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read arbitrary local fileEPSS 8.2%CVE-2009-1553—Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inEPSS 8.2%CVE-2009-0006—Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and poEPSS 8.2%CVE-2006-2020—Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insuffiEPSS 8.2%CVE-2008-5314—Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon EPSS 8.2%