Vulnerabilities in n/a

161,266 results
CVE-2007-6114—Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash)EPSS 6.2%CVE-2000-0895—Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbEPSS 6.2%CVE-2009-1724—Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 forEPSS 6.2%CVE-2000-0439—Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escEPSS 6.2%CVE-2011-4370—Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a deEPSS 6.2%CVE-2011-4371—Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a deEPSS 6.2%CVE-2017-3071—Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. SuccessfulEPSS 6.2%CVE-2007-4174—Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers EPSS 6.2%CVE-2009-1564—Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie dEPSS 6.2%CVE-2009-1565—vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6EPSS 6.2%CVE-2008-1480—rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request.EPSS 6.2%CVE-2021-43650—WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username during the login process.EPSS 6.2%CVE-2004-0889—Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of servEPSS 6.2%CVE-2001-0421—FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readabEPSS 6.2%CVE-2017-12837—Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attEPSS 6.2%CVE-2000-0626—Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.EPSS 6.2%CVE-2020-20969HIGHFile Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file.EPSS 6.2%CVE-2015-8779—Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackersEPSS 6.2%CVE-2008-5038—Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 fEPSS 6.2%CVE-2016-4000—Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.EPSS 6.2%