Vulnerabilities in N/A

161,457 results
CVE-2002-2088—The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access.EPSS 2.7%CVE-2007-0395—PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers to execute arbitrary PEPSS 2.7%CVE-2014-4976—Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in aEPSS 2.7%CVE-2016-2020—HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecifEPSS 2.7%CVE-2007-0679—PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows remote attackers to EPSS 2.7%CVE-2015-5947—SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code.EPSS 2.7%CVE-2016-3113—Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.EPSS 2.7%CVE-2006-0836—Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user into importing an LDIFEPSS 2.7%CVE-2006-0563—SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid EPSS 2.7%CVE-2007-0570—PHP remote file inclusion vulnerability in ains_main.php in Johannes Gijsbers (aka Taradino) Ad Fundum Integratable News Script (AINS) 0.02bEPSS 2.7%CVE-2015-1943—IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and EPSS 2.7%CVE-2020-12268—jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.EPSS 2.7%CVE-2016-4065—The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cEPSS 2.7%CVE-2013-6787—SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the noEPSS 2.7%CVE-2015-2020—The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable clEPSS 2.7%CVE-2000-0060—Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.EPSS 2.7%CVE-2008-7252—libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and atEPSS 2.7%CVE-2016-6151—CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectoEPSS 2.7%CVE-2020-24631—A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.EPSS 2.7%CVE-2020-24632—A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.EPSS 2.7%