Vulnerabilities in N/A

161,455 results
CVE-2008-0736—admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the pathEPSS 3.1%CVE-2019-7846—Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation coulEPSS 3.1%CVE-2010-0595—Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network BuildiEPSS 3.1%CVE-2018-14059—Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification StoreEPSS 3.1%CVE-2018-16983—NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/htmlEPSS 3.1%CVE-1999-0260—The jj CGI program allows command execution via shell metacharacters.EPSS 3.1%CVE-2019-14308CRITICALSeveral Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execEPSS 3.1%CVE-2023-39008—A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business EditionEPSS 3.1%CVE-2017-12976—git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostnEPSS 3.1%CVE-2005-1899—Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion EliEPSS 3.1%CVE-2008-1651—Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files viEPSS 3.1%CVE-2001-0327—iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or caEPSS 3.1%CVE-2007-1626—PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP codEPSS 3.1%CVE-2023-0647MEDIUMdst-admin kickPlayer command injectionEPSS 3.1%CVE-2005-1165—Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data.EPSS 3.1%CVE-2016-5275—Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackeEPSS 3.1%CVE-2012-0043—Buffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 andEPSS 3.1%CVE-2019-14300CRITICALSeveral Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or cEPSS 3.1%CVE-2015-6977—FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (mEPSS 3.1%CVE-2015-7010—FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (mEPSS 3.1%