Vulnerabilities in N/A

161,457 results
CVE-2007-3866—Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (EPSS 2.7%CVE-2016-1374—The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to executeEPSS 2.7%CVE-2015-2020—The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable clEPSS 2.7%CVE-2013-6787—SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the noEPSS 2.7%CVE-2016-5352—epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attacEPSS 2.7%CVE-2020-24631—A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.EPSS 2.7%CVE-2000-0060—Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.EPSS 2.7%CVE-2016-6151—CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectoEPSS 2.7%CVE-2007-6237—cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, whiEPSS 2.7%CVE-2008-7252—libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and atEPSS 2.7%CVE-2005-4451—Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors.EPSS 2.7%CVE-2013-1006—WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (meEPSS 2.7%CVE-2006-1039—SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain senEPSS 2.7%CVE-2013-1005—WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (meEPSS 2.7%CVE-2013-1003—WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (meEPSS 2.7%CVE-2013-1002—WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (meEPSS 2.7%CVE-2006-2116—planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.EPSS 2.7%CVE-2013-4289—Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, whEPSS 2.7%CVE-2012-5453—SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbEPSS 2.7%CVE-2018-12886—stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certainEPSS 2.7%