Vulnerabilities in n/a

161,281 results
CVE-2020-7625—op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.EPSS 4.2%CVE-2020-7627—node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument inEPSS 4.2%CVE-2017-6994—An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is afEPSS 4.2%CVE-2015-4901—Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown EPSS 4.2%CVE-2019-12279—Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). NOTE: The vendor dispEPSS 4.2%CVE-2018-5004—Adobe Experience Manager versions 6.2 and 6.3 have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitEPSS 4.2%CVE-2012-4445—Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hoEPSS 4.2%CVE-2014-3411—Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecEPSS 4.2%CVE-2007-3996—Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possiblyEPSS 4.2%CVE-2014-3073—Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows reEPSS 4.2%CVE-2005-0397—Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denEPSS 4.2%CVE-2021-45468—Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAEPSS 4.2%CVE-2019-16168MEDIUMIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqEPSS 4.2%CVE-2013-5615—The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.EPSS 4.2%CVE-2014-0139—cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in theEPSS 4.2%CVE-2020-11969—If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is openEPSS 4.2%CVE-2006-3993—PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows remote attackers to EPSS 4.2%CVE-2017-2950—Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulEPSS 4.2%CVE-2008-1808—Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in EPSS 4.2%CVE-2006-4610—PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, allows remote attackeEPSS 4.2%