Vulnerabilities in N/A

161,455 results
CVE-2015-3173—custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.EPSS 3.3%CVE-2016-8693—Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of sEPSS 3.3%CVE-2013-3557—The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x beforeEPSS 3.3%CVE-2018-20748—LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was iEPSS 3.3%CVE-2003-1371—Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phEPSS 3.3%CVE-2007-3470—Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackerEPSS 3.3%CVE-2011-0213—Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service EPSS 3.3%CVE-2011-2643—Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackEPSS 3.3%CVE-2015-4749—Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackerEPSS 3.3%CVE-2008-0760—Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, aEPSS 3.3%CVE-2011-4579—The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before EPSS 3.3%CVE-2018-1000098—Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attackEPSS 3.3%CVE-2016-10506—Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 EPSS 3.3%CVE-2002-0209—Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attacEPSS 3.3%CVE-2000-0897—Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a dirEPSS 3.3%CVE-2002-1071—ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet withEPSS 3.3%CVE-2023-40748—PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.EPSS 3.3%CVE-2015-8796—Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote EPSS 3.3%CVE-2018-19131—Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.EPSS 3.3%CVE-2001-0386—AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.EPSS 3.3%