Vulnerabilities in N/A

161,456 results
CVE-2013-2139—Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors relaEPSS 3.0%CVE-2010-0975—PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in EPSS 3.0%CVE-2023-28531—ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected vEPSS 3.0%CVE-2008-5920—The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is EPSS 3.0%CVE-2019-16197—In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text betweeEPSS 3.0%CVE-2018-8814—Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requestEPSS 3.0%CVE-2016-1952—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attaEPSS 3.0%CVE-2015-4908—Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a EPSS 3.0%CVE-2021-43042—An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This wasEPSS 3.0%CVE-2019-9580—In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" orEPSS 3.0%CVE-2014-4003—The System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system.EPSS 3.0%CVE-2017-3634—Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 andEPSS 3.0%CVE-2008-6235—The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a fEPSS 3.0%CVE-2005-3812—freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT command with missing EPSS 3.0%CVE-2012-4987—Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafEPSS 3.0%CVE-2004-2570—Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary fEPSS 3.0%CVE-2018-7456—A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alphaEPSS 3.0%CVE-2016-6178—Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devicEPSS 3.0%CVE-2017-3825—A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticaEPSS 3.0%CVE-2007-2324—Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileEPSS 3.0%