Vulnerabilities in n/a
161,189 resultsCVE-2008-2317—WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execuEPSS 7.7%CVE-2021-3331—WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads sessionEPSS 7.7%CVE-2000-0452—Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM EPSS 7.7%CVE-2007-3446—BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers to obtain login accesEPSS 7.7%CVE-2008-0222—Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to uploEPSS 7.7%CVE-2001-1471—prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prEPSS 7.7%CVE-1999-1016—Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly otheEPSS 7.7%CVE-2002-0230—Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients EPSS 7.7%CVE-2010-0387—Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackEPSS 7.7%CVE-2016-9052CRITICALAn exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A speciEPSS 7.7%CVE-2020-14946—downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users EPSS 7.7%CVE-2007-2988—A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials areEPSS 7.7%CVE-2002-0348—service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service arEPSS 7.7%CVE-2013-6674—Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey befEPSS 7.7%CVE-2011-5129—Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbiEPSS 7.7%CVE-2015-4485—Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 EPSS 7.7%CVE-2002-0136—Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for formEPSS 7.7%CVE-2017-11466—Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated admEPSS 7.7%CVE-2012-3358—Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of serviEPSS 7.7%CVE-2008-5616—Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackerEPSS 7.7%