Vulnerabilities in N/A
161,398 resultsCVE-2001-1045—Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files vEPSS 3.8%CVE-2015-4598—PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote EPSS 3.8%CVE-2019-15544—An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls.EPSS 3.8%CVE-2015-7938—Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors.EPSS 3.8%CVE-2002-1767—Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via EPSS 3.8%CVE-2006-4853—SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the idEPSS 3.8%CVE-2011-0230—Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote attackers to executeEPSS 3.8%CVE-2007-0919—Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory iEPSS 3.8%CVE-2004-2632—phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modiEPSS 3.8%CVE-2020-24656—Maltego before 4.2.12 allows XXE attacks.EPSS 3.8%CVE-2009-3109—Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authenEPSS 3.8%CVE-2020-9036—Jeedom through 4.0.38 allows XSS.EPSS 3.8%CVE-2015-1725—Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and REPSS 3.8%CVE-2018-0353—A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cirEPSS 3.8%CVE-2018-11339—An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.EPSS 3.8%CVE-2015-8972—Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-deEPSS 3.8%CVE-2009-2995—Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via uEPSS 3.8%CVE-2006-7222—Buffer overflow in the CFLICStream::_deltachunk function in FLICSource.cpp in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remoteEPSS 3.8%CVE-2000-0629—The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading JavaEPSS 3.8%CVE-2015-6467—Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin.EPSS 3.8%