Vulnerabilities in n/a

161,272 results
CVE-2015-0285—The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a EPSS 5.0%CVE-2018-11526—The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.EPSS 5.0%CVE-2021-30121MEDIUM(Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6EPSS 5.0%CVE-2020-8441—JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a diEPSS 5.0%CVE-2021-28242—SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information byEPSS 5.0%CVE-2018-11525—The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.EPSS 5.0%CVE-2009-3537—Multiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote attackers to cause a denial of service (application crasEPSS 5.0%CVE-2019-13623—In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive withEPSS 5.0%CVE-2013-4868—Karotz API 12.07.19.00: Session Token Information DisclosureEPSS 5.0%CVE-2020-24606HIGHSquid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handlEPSS 5.0%CVE-2007-6103—I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet that contains zero inEPSS 5.0%CVE-2011-2373—Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14EPSS 5.0%CVE-2005-0671—Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary codEPSS 5.0%CVE-2022-23050—ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside theEPSS 5.0%CVE-2009-4127—Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitraEPSS 5.0%CVE-2007-2435—Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackersEPSS 5.0%CVE-2019-19842—emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribuEPSS 5.0%CVE-2022-40773HIGHZoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. This allows EPSS 5.0%CVE-2019-19940—Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro Grande before 6.16.12 allows remote authenticatEPSS 5.0%CVE-2010-2172—Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attackers to cause a denial of service via unknown vectors.EPSS 5.0%