Vulnerabilities in n/a

161,189 results
CVE-2019-11234—FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2EPSS 7.6%CVE-2007-0228—The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service (service crash) viaEPSS 7.6%CVE-2004-0040—Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 42EPSS 7.6%CVE-2019-11356—The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code viaEPSS 7.6%CVE-2006-4842—The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifyEPSS 7.6%CVE-2003-1251—The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 200EPSS 7.6%CVE-2018-0315—A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unautheEPSS 7.6%CVE-2001-1212—Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc paramEPSS 7.6%CVE-2014-4306—Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (dot dot) iEPSS 7.6%CVE-2007-0821—Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. (dot dot)EPSS 7.6%CVE-2012-2814—Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote aEPSS 7.6%CVE-2019-15505—drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (whichEPSS 7.6%CVE-2013-1807—PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which migEPSS 7.6%CVE-2007-0062—Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 BuilEPSS 7.6%CVE-2006-3588—Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) vEPSS 7.6%CVE-2016-10159—Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackersEPSS 7.6%CVE-2014-0119—Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parsEPSS 7.6%CVE-2011-3327—Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers EPSS 7.6%CVE-2013-3706—Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows remote attackers to rEPSS 7.6%CVE-2020-24616—FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteroEPSS 7.6%