Vulnerabilities in N/A

161,284 results
CVE-2007-6234—index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a loggedin parameter withEPSS 4.3%CVE-2020-8137—Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attackerEPSS 4.3%CVE-2018-16302—MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file.EPSS 4.3%CVE-2009-1439—Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crEPSS 4.3%CVE-2009-0042—Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for thEPSS 4.3%CVE-2002-2208—Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackerEPSS 4.3%CVE-2006-4902—The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not pEPSS 4.3%CVE-2017-7108—An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The EPSS 4.3%CVE-2017-7110—An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The EPSS 4.3%CVE-2017-7112—An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The EPSS 4.3%CVE-2016-9936—The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-afteEPSS 4.3%CVE-2007-2756—The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG iEPSS 4.3%CVE-2010-0684—Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inEPSS 4.3%CVE-2013-0912—WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage "type confusion."EPSS 4.3%CVE-2017-7105—An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The EPSS 4.3%CVE-2016-2166—The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton beforeEPSS 4.3%CVE-2000-0940—Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "EPSS 4.3%CVE-2004-1196—Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via thEPSS 4.3%CVE-2008-3111—Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x beEPSS 4.3%CVE-2010-2860—The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network wEPSS 4.3%