Vulnerabilities in N/A
161,455 resultsCVE-2014-9365—The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x bEPSS 3.0%CVE-2009-0173—Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users toEPSS 3.0%CVE-2010-1442—VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) orEPSS 3.0%CVE-2007-6007—Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 EPSS 3.0%CVE-2007-1670—Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direnEPSS 3.0%CVE-2021-21874CRITICALA specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HEPSS 3.0%CVE-2021-21873CRITICALA specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HEPSS 3.0%CVE-2007-0106—Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitraryEPSS 3.0%CVE-2018-17996—LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting EPSS 3.0%CVE-2020-8184—A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possibEPSS 3.0%CVE-2021-21875CRITICALA specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can make an authenticated HTEPSS 3.0%CVE-2016-9210—A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticaEPSS 3.0%CVE-2014-8174—eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.EPSS 3.0%CVE-2021-27695—Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HEPSS 3.0%CVE-2007-4127—PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remotEPSS 3.0%CVE-2016-0771—The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is confEPSS 3.0%CVE-2009-0204—Cross-site scripting (XSS) vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via EPSS 3.0%CVE-2009-4542—Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inject arbitrary web scrEPSS 3.0%CVE-2017-16803—In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recurEPSS 3.0%CVE-2006-5733—Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local EPSS 3.0%