Vulnerabilities in n/a

161,258 results
CVE-2015-8439—The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and bEPSS 6.6%CVE-2015-1858—Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers tEPSS 6.6%CVE-2012-4406—OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadataEPSS 6.6%CVE-2018-1000632—dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute thaEPSS 6.6%CVE-2008-4211—Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS foEPSS 6.6%CVE-2014-0116—CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the geEPSS 6.6%CVE-2002-2253—Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long headerEPSS 6.6%CVE-2017-4984—In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may EPSS 6.6%CVE-2000-0038—glFtpD includes a default glftpd user account with a default password and a UID of 0.EPSS 6.6%CVE-2016-1043—Integer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and AcroEPSS 6.6%CVE-2014-4154—ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, whiEPSS 6.6%CVE-2017-2531—An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is afEPSS 6.6%CVE-2017-6980—An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is afEPSS 6.6%CVE-2004-1540—ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a passwoEPSS 6.6%CVE-2005-1992—The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using hanEPSS 6.6%CVE-1999-0235—Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.EPSS 6.6%CVE-2017-7914—A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10EPSS 6.6%CVE-2014-6040—GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a mEPSS 6.6%CVE-2015-3187—The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is useEPSS 6.6%CVE-2010-1417—The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4EPSS 6.6%