Vulnerabilities in N/A
161,455 resultsCVE-2012-0818—RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML externaEPSS 3.2%CVE-2015-0818—Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin EPSS 3.2%CVE-2018-17385—SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter.EPSS 3.2%CVE-2002-1023—BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.EPSS 3.2%CVE-2016-4616—libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, EPSS 3.2%CVE-2000-0428—Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a lEPSS 3.2%CVE-2001-0564—APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial ofEPSS 3.2%CVE-2018-17377—SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.EPSS 3.2%CVE-2021-31915—In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.EPSS 3.2%CVE-2018-17391—SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.EPSS 3.2%CVE-2000-0798—The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users tEPSS 3.2%CVE-2001-0675—Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account coEPSS 3.2%CVE-2016-8602—The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash)EPSS 3.2%CVE-2010-4670—The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with sEPSS 3.2%CVE-2011-1430—The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-EPSS 3.2%CVE-2008-6937—Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary fileEPSS 3.2%CVE-2018-14048—An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling forEPSS 3.2%CVE-2015-7287—CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations,EPSS 3.2%CVE-2014-0437—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allowEPSS 3.2%CVE-2000-0800—String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gaiEPSS 3.2%