Vulnerabilities in N/A
161,457 resultsCVE-2018-12421—LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a craftedEPSS 2.7%CVE-2020-6093MEDIUMAn exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF EPSS 2.7%CVE-2014-2413—Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vEPSS 2.7%CVE-2019-11090—Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; EPSS 2.7%CVE-2001-0919—Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user whenEPSS 2.7%CVE-2005-1672—Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via thEPSS 2.7%CVE-2002-0306—ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in theEPSS 2.7%CVE-2005-3780—Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm module or (2) certain EPSS 2.7%CVE-2017-7920—An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for ReEPSS 2.7%CVE-2019-19242—SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.EPSS 2.7%CVE-2014-10071—In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.EPSS 2.7%CVE-2002-2094—Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path thEPSS 2.7%CVE-2006-0457—Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of sEPSS 2.7%CVE-2013-4828—HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775;EPSS 2.7%CVE-2016-0791—Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attEPSS 2.7%CVE-2012-3443—The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data duringEPSS 2.7%CVE-2001-0155—Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name thEPSS 2.7%CVE-2005-0115—Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file wiEPSS 2.7%CVE-2022-42160HIGHD-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at functEPSS 2.7%CVE-2009-0041—IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x beforEPSS 2.7%