Vulnerabilities in N/A
161,455 resultsCVE-2005-3520—Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1)EPSS 3.0%CVE-2011-1971—The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file EPSS 3.0%CVE-2016-7246—The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1EPSS 3.0%CVE-2011-4415—The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif moduEPSS 3.0%CVE-2018-11362—In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.cEPSS 3.0%CVE-2019-11361—Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually EPSS 3.0%CVE-2019-3960—Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uplEPSS 3.0%CVE-2016-7215—The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 EPSS 3.0%CVE-2017-6895—USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml.EPSS 3.0%CVE-2019-17625—There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The probEPSS 3.0%CVE-2015-7192—The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, whEPSS 3.0%CVE-2006-1479—Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote attackers to inject arbiEPSS 3.0%CVE-2020-24635—A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): ArubaEPSS 3.0%CVE-2021-25146—A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): ArubaEPSS 3.0%CVE-2007-3556—Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloaEPSS 3.0%CVE-2010-3708—The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.EPSS 3.0%CVE-2002-0366—Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows loEPSS 3.0%CVE-2007-3790—The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial of service via a longEPSS 3.0%CVE-2017-6925—In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, EPSS 3.0%CVE-2007-5334—Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, whicEPSS 3.0%