Vulnerabilities in N/A
161,457 resultsCVE-2016-7112—A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant MoEPSS 2.9%CVE-2016-4985—The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive EPSS 2.9%CVE-2009-1246—Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dEPSS 2.9%CVE-2009-0669—Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers toEPSS 2.9%CVE-2007-3922—Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through EPSS 2.9%CVE-2012-0736—IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly create scan jobs, which allows remote attackers to execute arbiEPSS 2.9%CVE-2013-0384—Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated usEPSS 2.9%CVE-2009-0070—Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of serviEPSS 2.9%CVE-2007-2651—Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or possiEPSS 2.9%CVE-2015-2838—Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack EPSS 2.9%CVE-2022-26495—In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the namEPSS 2.9%CVE-2008-0354—Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to injEPSS 2.9%CVE-2014-8822—IOHIDFamily in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a kernel context or cause a denial of service (write EPSS 2.9%CVE-2014-8824—The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows attackers to execute arbEPSS 2.9%CVE-2018-0348—A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are EPSS 2.9%CVE-2014-1381—Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbiEPSS 2.9%CVE-2015-2141—The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the RabEPSS 2.9%CVE-2016-4476—hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remEPSS 2.9%CVE-2014-7986—install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application via a 1 value in the installProcess parameteEPSS 2.9%CVE-2017-15973—Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.EPSS 2.9%