Vulnerabilities in N/A
161,399 resultsCVE-2005-1153—Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascriEPSS 3.6%CVE-2009-1656—Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7EPSS 3.6%CVE-2015-9414—The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.EPSS 3.6%CVE-2004-1659—Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, JourEPSS 3.6%CVE-2014-4351—Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (applEPSS 3.6%CVE-2020-28493MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 3.6%CVE-2001-1114—book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.EPSS 3.6%CVE-2004-1207—The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second EncountEPSS 3.6%CVE-2014-8567—The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logoutEPSS 3.6%CVE-2021-39501—EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.EPSS 3.6%CVE-2007-0539—The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) EPSS 3.6%CVE-2019-9195—util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP arEPSS 3.6%CVE-2016-3518—Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related toEPSS 3.6%CVE-2020-12663—Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.EPSS 3.6%CVE-2004-0916—Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containinEPSS 3.6%CVE-2014-4979—Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version nEPSS 3.6%CVE-2017-14266—tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6EPSS 3.6%CVE-2013-2512—The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command arguEPSS 3.6%CVE-2006-4910—The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attaEPSS 3.6%CVE-2016-9180—perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. ExternaEPSS 3.6%