Vulnerabilities in N/A
161,457 resultsCVE-2018-5754—Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-EPSS 2.9%CVE-2019-13379—On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenEPSS 2.9%CVE-2004-1847—News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in tEPSS 2.9%CVE-2020-15598—Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "Trustwave has signaledEPSS 2.9%CVE-2021-34166—A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin.EPSS 2.9%CVE-2016-6173—NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone trEPSS 2.9%CVE-2004-0485—The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a diEPSS 2.9%CVE-2015-2698—The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly aEPSS 2.9%CVE-2017-12216—A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write EPSS 2.9%CVE-2010-0853—Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion MiddlewaEPSS 2.9%CVE-2012-4086—A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commandsEPSS 2.9%CVE-2018-20786—libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (aEPSS 2.9%CVE-2005-2764—Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly execute arbitrary codeEPSS 2.9%CVE-2021-33562—A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTMEPSS 2.9%CVE-2000-1114—Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as "EPSS 2.9%CVE-2007-3950—lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors iEPSS 2.9%CVE-2005-4610—Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbiEPSS 2.9%CVE-2007-1218—Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows rEPSS 2.9%CVE-2001-1344—WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is maEPSS 2.9%CVE-2006-3945—The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background prEPSS 2.9%