Vulnerabilities in N/A
161,286 resultsCVE-2013-3444—The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software EPSS 4.2%CVE-2007-3980—PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbitrary PHP code via a EPSS 4.2%CVE-2017-8338—A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP paEPSS 4.2%CVE-2011-0495—Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.EPSS 4.2%CVE-2019-12328CRITICALA command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP pEPSS 4.2%CVE-2014-5194—Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into EPSS 4.2%CVE-2008-4340—Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an HTML document contaEPSS 4.2%CVE-2006-5601—Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote aEPSS 4.2%CVE-2011-3189—The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which EPSS 4.2%CVE-2020-15692—In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file paEPSS 4.2%CVE-2014-4485—Buffer overflow in the XML parser in Foundation in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remotEPSS 4.2%CVE-2006-6503—Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to EPSS 4.2%CVE-2010-3977—Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote aEPSS 4.2%CVE-2019-14973—_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compileEPSS 4.2%CVE-1999-0944—IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.EPSS 4.2%CVE-2004-2444—Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the actEPSS 4.2%CVE-2007-3388—Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cppEPSS 4.2%CVE-2020-25499—TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this funcEPSS 4.2%CVE-2011-4838—JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-depenEPSS 4.2%CVE-2010-2807—FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (EPSS 4.2%