Vulnerabilities in n/a
161,243 resultsCVE-2011-3321—Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA PoEPSS 7.1%CVE-2011-0403—Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote aEPSS 7.1%CVE-2014-8396—Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via aEPSS 7.1%CVE-2004-1020—The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary fileEPSS 7.1%CVE-2004-0629—Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote atEPSS 7.1%CVE-2006-3162—PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers to execute arbitraryEPSS 7.1%CVE-2017-11304—An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. SucceEPSS 7.1%CVE-2008-4242—ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request EPSS 7.1%CVE-2019-19919—Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object'EPSS 7.1%CVE-2019-8395—An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an aEPSS 7.1%CVE-2016-9684—The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web adminiEPSS 7.1%CVE-2003-0147—OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factEPSS 7.1%CVE-2007-6347—PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, EPSS 7.1%CVE-2011-4624—Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress alloEPSS 7.1%CVE-2009-4241—Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0EPSS 7.1%CVE-2016-2203—The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD paEPSS 7.1%CVE-2003-0625—Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request inEPSS 7.1%CVE-2007-2401—CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to injeEPSS 7.1%CVE-2016-0943—Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC ContinEPSS 7.1%CVE-2014-8111—Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackerEPSS 7.1%