Vulnerabilities in n/a

161,281 results
CVE-2015-1058—Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the EPSS 4.3%CVE-2016-1836—Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 1EPSS 4.3%CVE-2014-9664—FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denialEPSS 4.3%CVE-2011-3003—Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execEPSS 4.3%CVE-2010-2860—The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network wEPSS 4.3%CVE-2003-0492—Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web EPSS 4.3%CVE-2021-22897MEDIUMcurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST wEPSS 4.3%CVE-2005-1197—SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackeEPSS 4.3%CVE-2016-2297—Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command sEPSS 4.3%CVE-2003-0416—Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via (1) theEPSS 4.3%CVE-2016-7408—The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.EPSS 4.3%CVE-2014-8143—Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, aEPSS 4.3%CVE-2017-6044—An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all EPSS 4.3%CVE-2010-2587—The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (mEPSS 4.3%CVE-2008-2662—Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.EPSS 4.3%CVE-2005-1029—Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (EPSS 4.3%CVE-2006-1627—Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform pEPSS 4.3%CVE-2007-6544—Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameterEPSS 4.3%CVE-2019-15530—An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with AuthentiEPSS 4.3%CVE-2006-0789—Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an adminiEPSS 4.3%