Vulnerabilities in N/A

161,455 results
CVE-2013-7176—config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitraryEPSS 3.2%CVE-2015-8212—CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code viaEPSS 3.2%CVE-2013-7177—config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbEPSS 3.2%CVE-2004-0960—FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) EPSS 3.2%CVE-2021-22968—A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concreteEPSS 3.2%CVE-2013-6920—Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote EPSS 3.2%CVE-2018-1000824—MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential dEPSS 3.2%CVE-2017-9669—A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by EPSS 3.2%CVE-2014-4265—Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to DEPSS 3.2%CVE-2020-25144—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.2%CVE-2006-6150—PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute arbitrary PHP code EPSS 3.2%CVE-2010-2322—Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwritEPSS 3.2%CVE-2009-1834—Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remoEPSS 3.2%CVE-2009-1710—WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and EPSS 3.2%CVE-2017-9671—A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, byEPSS 3.2%CVE-2020-25145—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.2%CVE-2020-25149—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.2%CVE-1999-0428—OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.EPSS 3.2%CVE-2020-6017—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegmentEPSS 3.2%CVE-2014-9328—ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds coEPSS 3.2%