Vulnerabilities in n/a
161,289 resultsCVE-2005-3879—Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQLEPSS 4.1%CVE-2019-0136—Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to pEPSS 4.1%CVE-2012-3401—The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context strEPSS 4.1%CVE-2012-0472—The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, ThunderbiEPSS 4.1%CVE-2009-3534—Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitraEPSS 4.1%CVE-2010-2138—Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local filesEPSS 4.1%CVE-2008-1806—Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length vEPSS 4.1%CVE-2009-3219—Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers EPSS 4.1%CVE-2005-0737—Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.EPSS 4.1%CVE-2019-14744—In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interactioEPSS 4.1%CVE-2007-0722—Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafEPSS 4.1%CVE-2002-0102—Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 EPSS 4.1%CVE-2008-1202—Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject aEPSS 4.1%CVE-1999-0152—The DG/UX finger daemon allows remote command execution through shell metacharacters.EPSS 4.1%CVE-2017-9834—SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands viaEPSS 4.1%CVE-2017-3027—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulEPSS 4.1%CVE-2017-3026—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulEPSS 4.1%CVE-2006-1921—nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter.EPSS 4.1%CVE-2001-1306—iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrarEPSS 4.1%CVE-2008-4222—natd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of serviceEPSS 4.1%