Vulnerabilities in n/a
161,258 resultsCVE-2007-0454—Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitraEPSS 6.5%CVE-2007-6254—Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6EPSS 6.5%CVE-2019-17075—An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is direcEPSS 6.5%CVE-2019-13117MEDIUMIn numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumberEPSS 6.5%CVE-2002-0979—The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a knowEPSS 6.5%CVE-2024-33112HIGHD-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.EPSS 6.5%CVE-2010-0104—Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on the HP Small Form FaEPSS 6.5%CVE-2008-4821—Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to oEPSS 6.5%CVE-2014-3005—XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.EPSS 6.5%CVE-2009-3318—Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbEPSS 6.5%CVE-2001-0383—banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which doeEPSS 6.5%CVE-2006-3015—Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces EPSS 6.5%CVE-2011-1088—Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restricEPSS 6.5%CVE-2005-0699—Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and eaEPSS 6.5%CVE-2017-16932HIGHparser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.EPSS 6.5%CVE-2012-4560—Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary cEPSS 6.5%CVE-2007-2462—Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TPEPSS 6.5%CVE-2010-3183—The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.xEPSS 6.5%CVE-2019-12137—Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared noteEPSS 6.5%CVE-2022-21125MEDIUMIncomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable infoEPSS 6.5%