Vulnerabilities in N/A
161,400 resultsCVE-2011-3517—Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability viEPSS 3.5%CVE-2007-2747—Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dotEPSS 3.5%CVE-2005-2410—Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via formEPSS 3.5%CVE-2023-20860HIGHSpring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequesEPSS 3.5%CVE-2020-11647—In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/paEPSS 3.5%CVE-2013-7375—SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execEPSS 3.5%CVE-2006-7086—The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database EPSS 3.5%CVE-2004-1912—The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used iEPSS 3.5%CVE-2017-7272—PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that EPSS 3.5%CVE-2015-1132—fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vEPSS 3.5%CVE-2021-28041—ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket acEPSS 3.5%CVE-2013-1962—The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial EPSS 3.5%CVE-2019-18348MEDIUMAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the atEPSS 3.5%CVE-2021-23165—A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary coEPSS 3.5%CVE-2018-15919MEDIUMRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a targEPSS 3.5%CVE-2019-11076—Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.EPSS 3.5%CVE-2002-2055—Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject arbitrary web scriptEPSS 3.5%CVE-2006-5334—Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenEPSS 3.5%CVE-2005-0247—Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number ofEPSS 3.5%CVE-2005-0881—Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary EPSS 3.5%