Vulnerabilities in N/A
161,455 resultsCVE-2014-8384—The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modiEPSS 3.2%CVE-2019-15819—The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication.EPSS 3.2%CVE-2014-0437—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allowEPSS 3.2%CVE-2015-7287—CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations,EPSS 3.2%CVE-2018-14048—An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling forEPSS 3.2%CVE-2013-6233—Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via EPSS 3.2%CVE-2013-3499—GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtainEPSS 3.2%CVE-2023-33254MEDIUMThere is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may proviEPSS 3.2%CVE-2017-6183—In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active DirectoryEPSS 3.2%CVE-2008-5315—Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to rEPSS 3.2%CVE-2007-4081—Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web scripEPSS 3.2%CVE-2019-13012—The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dEPSS 3.2%CVE-2015-5786—Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicatiEPSS 3.2%CVE-2012-1464—Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a request with a traiEPSS 3.2%CVE-2012-1466—The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script EPSS 3.2%CVE-2008-4225—Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite EPSS 3.2%CVE-2008-3638—Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbiEPSS 3.2%CVE-1999-0861—Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.EPSS 3.2%CVE-2021-41829—Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key.EPSS 3.2%CVE-2010-0641—Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5 allows remote attacEPSS 3.2%