Vulnerabilities in N/A
161,455 resultsCVE-2023-46695—An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As EPSS 53.4%CVE-2011-0104—Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to exEPSS 53.4%CVE-2006-5702—Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1)EPSS 53.4%CVE-2016-2211—The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 EPSS 53.4%CVE-2005-1978—COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbiEPSS 53.4%CVE-2005-2847—img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metachaEPSS 53.4%CVE-2006-6761—Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbiEPSS 53.4%CVE-2014-9118—The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacEPSS 53.4%CVE-2014-0644—EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML EPSS 53.3%CVE-2015-7007—Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execuEPSS 53.3%CVE-1999-0502—A Unix account has a default, null, blank, or missing password.EPSS 53.3%CVE-2018-5006—Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to seEPSS 53.3%CVE-1999-0191—IIS newdsn.exe CGI script allows remote users to overwrite files.EPSS 53.3%CVE-2009-0043—The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict accesEPSS 53.3%CVE-2024-37843HIGHCraft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.EPSS 53.2%CVE-2018-7739—antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters,EPSS 53.2%CVE-2019-17382—An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and aEPSS 53.2%CVE-2008-3922—awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parametEPSS 53.2%CVE-2019-11577—dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.EPSS 53.1%CVE-2019-9760—FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that EPSS 53.1%