Vulnerabilities in N/A
161,455 resultsCVE-2014-4984—Déjà Vu Crescendo Sales CRM has remote SQL InjectionEPSS 3.0%CVE-2014-4214—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availEPSS 3.0%CVE-2018-0350—A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbiEPSS 3.0%CVE-2017-2508—An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "EPSS 3.0%CVE-2006-0553—PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" usiEPSS 3.0%CVE-2020-29576—The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deplEPSS 3.0%CVE-2020-7621—strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmdEPSS 3.0%CVE-2014-9747—The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-oEPSS 3.0%CVE-2013-4413—Directory traversal vulnerability in controller/concerns/render_redirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers EPSS 3.0%CVE-2019-9371—In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no addEPSS 3.0%CVE-2019-14707—An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading EPSS 3.0%CVE-2010-2112—Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files viEPSS 3.0%CVE-2017-6610—A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenticated, remote attackeEPSS 3.0%CVE-2023-27216HIGHAn issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.EPSS 3.0%CVE-2008-3033—RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to accesEPSS 3.0%CVE-2000-0196—Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email messagEPSS 3.0%CVE-2022-36231CRITICALpdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.EPSS 3.0%CVE-2018-9966—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interactioEPSS 3.0%CVE-2005-4142—The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote atEPSS 3.0%CVE-2003-1232—Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-asEPSS 3.0%