Vulnerabilities in N/A

161,457 results
CVE-2021-25945—Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to rEPSS 3.0%CVE-2013-3005—The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass inteEPSS 3.0%CVE-2020-13854—Artica Pandora FMS 7.44 allows privilege escalation.EPSS 3.0%CVE-2021-25953—Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to EPSS 3.0%CVE-2001-0074—Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the EPSS 3.0%CVE-2000-0903—Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files EPSS 3.0%CVE-2011-3221—QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execuEPSS 3.0%CVE-2001-0306—Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) EPSS 3.0%CVE-2015-5922—Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS beforeEPSS 3.0%CVE-2016-5234—Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videEPSS 3.0%CVE-2012-4220—diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackEPSS 3.0%CVE-2000-0914—OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.EPSS 3.0%CVE-2005-3461—Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identiEPSS 3.0%CVE-2020-24036—PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicEPSS 3.0%CVE-2016-10308—Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the samEPSS 3.0%CVE-2018-5784—In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leveraEPSS 3.0%CVE-2014-10024—Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote aEPSS 3.0%CVE-2010-2523—Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND_EPSS 3.0%CVE-2005-1360—PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the pEPSS 3.0%CVE-2007-6304—The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUSEPSS 3.0%