Vulnerabilities in n/a
161,258 resultsCVE-2018-6797—An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over thEPSS 6.5%CVE-2009-2139—Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and relEPSS 6.5%CVE-2008-4829—Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long "Zwitterion vEPSS 6.5%CVE-2010-1789—Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10EPSS 6.5%CVE-2019-7268—Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.EPSS 6.5%CVE-2001-0075—Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fEPSS 6.5%CVE-2001-0305—Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dotEPSS 6.5%CVE-2001-0293—Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET cEPSS 6.5%CVE-2013-2758—Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a prediEPSS 6.5%CVE-2017-2476—An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affectedEPSS 6.5%CVE-2011-0383—The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence MultipointEPSS 6.5%CVE-2010-0040—Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary cEPSS 6.5%CVE-2017-11302—An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful expEPSS 6.5%CVE-2007-1049—Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WorEPSS 6.5%CVE-2012-0831—PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variablEPSS 6.5%CVE-2010-2435—Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTEPSS 6.5%CVE-2015-0569—Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for theEPSS 6.5%CVE-2010-1748—The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10EPSS 6.5%CVE-2002-0968—Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code vEPSS 6.5%CVE-2003-0755—Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory nameEPSS 6.5%