Vulnerabilities in N/A
161,457 resultsCVE-2016-11020—Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.EPSS 2.9%CVE-2025-50460CRITICALA remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py usingEPSS 2.9%CVE-2018-6010—In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflEPSS 2.9%CVE-2015-3832—Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitraryEPSS 2.9%CVE-2015-3669—QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory cEPSS 2.9%CVE-2021-3318—attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.EPSS 2.9%CVE-2006-5777—Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-emptyEPSS 2.9%CVE-2020-15586—Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, bEPSS 2.9%CVE-2021-46440—Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attackEPSS 2.9%CVE-2015-3664—QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory cEPSS 2.9%CVE-2017-6835—The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a deEPSS 2.9%CVE-2017-2516—An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows atEPSS 2.9%CVE-2010-3501—Unspecified vulnerability in the OID component in Oracle Fusion Middleware 10.1.2.3, 10.1.4.3, and 11.1.1.2.0 allows remote attackers to affEPSS 2.9%CVE-2008-0719—SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allEPSS 2.9%CVE-2015-8519—Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrEPSS 2.9%CVE-2014-0471—Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 alloEPSS 2.9%CVE-2020-35185—The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost docEPSS 2.9%CVE-2020-10228—A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote coEPSS 2.9%CVE-2001-1580—Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files EPSS 2.9%CVE-2015-3665—QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory cEPSS 2.9%