Vulnerabilities in N/A
161,455 resultsCVE-2009-0238HIGHMicrosoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for WordEPSS 42.9%KEVCVE-2023-0448MEDIUMThe WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected croEPSS 42.9%CVE-2023-49231CRITICALAn authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administraEPSS 42.9%CVE-2014-1691—The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injectEPSS 42.9%CVE-2009-0836—Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing EPSS 42.9%CVE-2013-2266—libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms EPSS 42.9%CVE-2025-29513MEDIUMCross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API AccessEPSS 42.8%CVE-2004-0897—The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackEPSS 42.8%CVE-2016-5360—HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service (uninitialized memorEPSS 42.8%CVE-2005-1255—Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions beEPSS 42.8%CVE-2015-0273—Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remotEPSS 42.8%CVE-2018-4904—An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andEPSS 42.8%CVE-2021-43421—A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to EPSS 42.8%CVE-2006-3449—Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to exEPSS 42.8%CVE-2014-1610—MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remEPSS 42.8%CVE-2020-10977—GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects.EPSS 42.7%CVE-2017-11284—Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and UpEPSS 42.7%CVE-2017-11283—Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and UpEPSS 42.7%CVE-2005-4832—SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevaEPSS 42.7%CVE-2016-2171—The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attaEPSS 42.7%