Vulnerabilities in N/A
161,455 resultsCVE-2003-0690—KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privilegEPSS 3.1%CVE-2015-8746—fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, EPSS 3.1%CVE-2012-1108—The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a craftEPSS 3.1%CVE-2015-2564—SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQEPSS 3.1%CVE-2012-3383—The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not pEPSS 3.1%CVE-2016-9107—The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via EPSS 3.1%CVE-2004-0094—Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when usinEPSS 3.1%CVE-2004-1176—Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly EPSS 3.1%CVE-1999-0817—Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certainEPSS 3.1%CVE-2008-2051—The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyteEPSS 3.1%CVE-2006-6484—The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise EPSS 3.1%CVE-2010-3541—Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.EPSS 3.1%CVE-2012-0660—Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of serviceEPSS 3.1%CVE-2016-7902—Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permiEPSS 3.1%CVE-2021-28111—Draeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code execution by an authenticated attacker.EPSS 3.1%CVE-2016-3440—Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related toEPSS 3.1%CVE-2008-3912—libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors rEPSS 3.1%CVE-2014-8712—The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x befoEPSS 3.1%CVE-2013-7069—ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrEPSS 3.1%CVE-2007-0651—Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary JavascEPSS 3.1%