Vulnerabilities in N/A

161,457 results
CVE-2020-28864—Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a EPSS 2.8%CVE-2015-0529—EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it eEPSS 2.8%CVE-2008-5536—Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document bEPSS 2.8%CVE-2010-1323—MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksEPSS 2.8%CVE-2001-0843—Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.EPSS 2.8%CVE-2017-1000476—ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to caEPSS 2.8%CVE-2020-15004—OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.EPSS 2.8%CVE-2014-1586—content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consEPSS 2.8%CVE-2013-7416—canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a EPSS 2.8%CVE-2017-6837—WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a lEPSS 2.8%CVE-2017-6829—The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crashEPSS 2.8%CVE-2019-13550—In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cauEPSS 2.8%CVE-2008-0682—SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrarEPSS 2.8%CVE-2007-5857—Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, EPSS 2.8%CVE-2018-12265—Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basEPSS 2.8%CVE-2001-1359—Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which aEPSS 2.8%CVE-2007-4358—Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (aka connection packet)EPSS 2.8%CVE-2001-1223—The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain aEPSS 2.8%CVE-2013-4614—English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows thEPSS 2.8%CVE-2002-0255—The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service EPSS 2.8%