Vulnerabilities in N/A

161,455 results
CVE-2016-0502—Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availabilityEPSS 3.1%CVE-2013-3839—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allowEPSS 3.1%CVE-2012-2791—Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c iEPSS 3.1%CVE-2012-2776—Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unkEPSS 3.1%CVE-2012-2787—Unspecified vulnerability in the decode_frame function in libavcodec/indeo4.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknownEPSS 3.1%CVE-2010-5304—A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker coulEPSS 3.1%CVE-2007-3425—Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbitrary local files viaEPSS 3.1%CVE-2017-18187—In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_pskEPSS 3.1%CVE-2012-5074—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers tEPSS 3.1%CVE-2015-8504—Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and applicationEPSS 3.1%CVE-2019-14281—The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.EPSS 3.1%CVE-2020-28900—Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of PEPSS 3.1%CVE-2018-12631—Redatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin/rpwebutilities.exe/text?LFN=../ directory EPSS 3.1%CVE-2002-0537—The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can accessEPSS 3.1%CVE-2013-3793—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticateEPSS 3.1%CVE-2007-1894—Cross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before 20070309 allows remote attackers to inject EPSS 3.1%CVE-2013-3213—Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the (1EPSS 3.1%CVE-2019-9634—Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.EPSS 3.1%CVE-2019-13236—In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.EPSS 3.1%CVE-2022-30321—go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flawsEPSS 3.1%