Vulnerabilities in N/A

161,457 results
CVE-2021-32952—An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lackEPSS 2.7%CVE-1999-0454—A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool suchEPSS 2.7%CVE-2002-0751—CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (EPSS 2.7%CVE-2021-32948—An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the EPSS 2.7%CVE-2021-26232—SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via tEPSS 2.7%CVE-2014-5068—Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a EPSS 2.7%CVE-2017-8409—An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and passwordEPSS 2.7%CVE-2015-2946—Stack-based buffer overflow in the Open CAD Format Council SXF common library before 3.30 allows remote attackers to execute arbitrary code EPSS 2.7%CVE-2013-3260—Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUseEPSS 2.7%CVE-2015-3238—The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, aEPSS 2.7%CVE-2005-2323—Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to EPSS 2.7%CVE-2005-2346—Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a lonEPSS 2.7%CVE-2016-2560—Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 alEPSS 2.7%CVE-2004-1002—Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet withEPSS 2.7%CVE-2010-3061—Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x befEPSS 2.7%CVE-2005-1402—Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products,EPSS 2.7%CVE-2008-0297—PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which includes the credentials EPSS 2.7%CVE-2020-7704CRITICALPrototype PollutionEPSS 2.7%CVE-2015-1428—Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL commands via the sefrengEPSS 2.7%CVE-2021-25679—The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact aEPSS 2.7%