Vulnerabilities in N/A
161,266 resultsCVE-2021-45814—Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administratiEPSS 6.3%CVE-2017-3037—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption EPSS 6.3%CVE-2020-14944—Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation EPSS 6.3%CVE-2005-3010—Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote EPSS 6.3%CVE-2009-0572—PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globaEPSS 6.3%CVE-2000-0146—The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to tEPSS 6.3%CVE-2016-4002—Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allowEPSS 6.3%CVE-2011-5064—DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, anEPSS 6.3%CVE-2002-1910—Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackerEPSS 6.3%CVE-2008-4197—Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings tEPSS 6.3%CVE-2016-1244—The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf fEPSS 6.3%CVE-2010-4307—Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.EPSS 6.3%CVE-2010-4150—Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5EPSS 6.3%CVE-2017-2479—An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on WindowsEPSS 6.3%CVE-2014-3146MEDIUMIncomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scriptinEPSS 6.3%CVE-2007-3932—uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exit when it detects an EPSS 6.3%CVE-2015-5553—Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK beforeEPSS 6.3%CVE-2008-6535—admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password vEPSS 6.3%CVE-2007-1933—Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and execute arbitrary local fEPSS 6.3%CVE-2017-17458—In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the fEPSS 6.3%