Vulnerabilities in N/A

161,455 results
CVE-2009-2979—Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, EPSS 3.2%CVE-2019-11336—Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) byEPSS 3.2%CVE-2020-14977—An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attaEPSS 3.2%CVE-2004-0349—Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL.EPSS 3.2%CVE-2006-5094—PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote attackers to execute arEPSS 3.2%CVE-2004-0038—McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTPEPSS 3.2%CVE-2002-1982—Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory existEPSS 3.2%CVE-2009-2443—Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, EPSS 3.2%CVE-2009-3597—Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dowEPSS 3.2%CVE-2009-0790—The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 befoEPSS 3.2%CVE-2018-19370—A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0 EPSS 3.2%CVE-2013-2107—Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack thEPSS 3.2%CVE-2003-0760—Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.EPSS 3.2%CVE-2007-6378—Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files EPSS 3.2%CVE-2013-2223—GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (oEPSS 3.2%CVE-2008-1663—Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attackeEPSS 3.2%CVE-2005-3565—Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows remote attackers to gaiEPSS 3.2%CVE-2016-3620—The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attacEPSS 3.2%CVE-2001-0646—Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name ofEPSS 3.2%CVE-2022-44727CRITICALThe EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).EPSS 3.2%