Vulnerabilities in N/A
161,455 resultsCVE-2004-1435—Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2),EPSS 3.2%CVE-2004-0352—Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(02.05)S allow remote aEPSS 3.2%CVE-2008-3798—Cisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal, properly formed SSL packet that occurs duriEPSS 3.2%CVE-2006-1771—Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackersEPSS 3.2%CVE-2003-0588—admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administraEPSS 3.2%CVE-2008-3223—SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectorsEPSS 3.2%CVE-2017-18594—nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated bEPSS 3.2%CVE-2017-7625—In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and tEPSS 3.2%CVE-2019-9201CRITICALMultiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make chanEPSS 3.2%CVE-2005-0847—Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections.EPSS 3.2%CVE-2019-10639—The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a EPSS 3.2%CVE-2010-2812—Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service (exception and daemon crash) via a PING command that lacks an aEPSS 3.2%CVE-2014-2438—Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availEPSS 3.2%CVE-2003-0589—admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administratEPSS 3.2%CVE-2011-3652—The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackersEPSS 3.2%CVE-2019-12263—Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP UrEPSS 3.2%CVE-2014-6422—The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to causEPSS 3.2%CVE-2001-1463—The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password (OTP) autheEPSS 3.2%CVE-2002-0398—Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a loEPSS 3.2%CVE-2007-2882—Unspecified vulnerability in the NFS client module in Sun Solaris 8 through 10 before 20070524, when operating as an NFS server, allows remoEPSS 3.2%