Vulnerabilities in N/A

161,455 results
CVE-2008-0382—Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameterEPSS 41.9%CVE-2011-0531—demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of seEPSS 41.9%CVE-2008-3984—Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows EPSS 41.8%CVE-2008-3983—Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows EPSS 41.8%CVE-2015-4024—Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, aEPSS 41.8%CVE-2014-0255—Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (iSCSI service EPSS 41.8%CVE-2014-0256—Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service (iSCSI service outage)EPSS 41.8%CVE-2007-6166—Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remoteEPSS 41.8%CVE-2011-1591—Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers tEPSS 41.7%CVE-2022-26263—Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.EPSS 41.7%CVE-2013-1710—The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, ThunderbiEPSS 41.7%CVE-2021-22719—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and EPSS 41.7%CVE-2018-10736—A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter.EPSS 41.7%CVE-2018-10735—A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter.EPSS 41.7%CVE-2018-12905—joyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and "add" actions.EPSS 41.7%CVE-2016-6306—The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-boEPSS 41.7%CVE-2020-6074HIGHAn exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a uEPSS 41.7%CVE-2016-7479—In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-afEPSS 41.7%CVE-2013-3630—Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then trEPSS 41.7%CVE-2005-3142—Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbEPSS 41.7%