Vulnerabilities in n/a
161,276 resultsCVE-2011-5207—Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-EPSS 4.5%CVE-2010-0619—Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain LexmarEPSS 4.5%CVE-2015-8919—The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause EPSS 4.5%CVE-2002-1858—Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files iEPSS 4.5%CVE-2010-0570—Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for reEPSS 4.5%CVE-2017-15223—Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources (memory consEPSS 4.5%CVE-2018-12699—finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspEPSS 4.5%CVE-2009-4509—The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandbergEPSS 4.5%CVE-2020-13388—An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a EPSS 4.5%CVE-2005-0738—Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or movingEPSS 4.5%CVE-2015-5288—The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.xEPSS 4.5%CVE-2014-9751—The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a sourcEPSS 4.5%CVE-2011-2914—Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denEPSS 4.5%CVE-2001-0791—Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programEPSS 4.5%CVE-2006-6770—Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is enabled, allow remote EPSS 4.5%CVE-2016-4198—Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC ContinEPSS 4.5%CVE-2017-18024—AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT elemeEPSS 4.5%CVE-2011-3046—The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to exEPSS 4.5%CVE-2009-5065—Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows rEPSS 4.5%CVE-2009-3163—Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SIEPSS 4.5%