Vulnerabilities in N/A

161,455 results
CVE-2022-25241—In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).EPSS 3.3%CVE-2005-0428—The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a ranEPSS 3.3%CVE-2021-27370—The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.EPSS 3.3%CVE-2008-6902—Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrarEPSS 3.3%CVE-2019-18671—Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes inEPSS 3.3%CVE-2013-5810—Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentialityEPSS 3.3%CVE-2015-3686—CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 3.3%CVE-2023-22624HIGHZoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.EPSS 3.3%CVE-2012-1936—The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of aEPSS 3.3%CVE-2018-9091—A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.EPSS 3.3%CVE-2013-6032—cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.PEPSS 3.3%CVE-2013-5777—Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remotEPSS 3.3%CVE-2017-17434—The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data strEPSS 3.3%CVE-2015-3687—CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 3.3%CVE-2003-0565—Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a denial of service and poEPSS 3.3%CVE-2008-0422—SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commEPSS 3.3%CVE-2000-1234—violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by sEPSS 3.3%CVE-2011-4079—Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slEPSS 3.3%CVE-2012-3845—Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a long string in an iniEPSS 3.3%CVE-2010-3711—libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote autheEPSS 3.3%