Vulnerabilities in N/A
161,457 resultsCVE-2018-1000623—JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import RepoEPSS 2.8%CVE-2015-4262—The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the sessioEPSS 2.8%CVE-2022-44019HIGHIn Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter.EPSS 2.8%CVE-2017-3012—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL EPSS 2.8%CVE-2007-2850—The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.EPSS 2.8%CVE-2007-6215—Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary files via a .. (dot doEPSS 2.8%CVE-2007-6368—Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in theEPSS 2.8%CVE-2016-4324—Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related tEPSS 2.8%CVE-2017-18264—An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictionEPSS 2.8%CVE-2018-18956—The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfEPSS 2.8%CVE-2009-1491—McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other EPSS 2.8%CVE-2010-0673—SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackEPSS 2.8%CVE-2011-2356—WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memoEPSS 2.8%CVE-2006-0882—Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the EPSS 2.8%CVE-2004-1036—Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier,EPSS 2.8%CVE-2002-0610—Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privilEPSS 2.8%CVE-2004-2726—HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackeEPSS 2.8%CVE-2004-2341—PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_paEPSS 2.8%CVE-2001-0792—Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.EPSS 2.8%CVE-2019-13391—In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheVEPSS 2.8%