Vulnerabilities in n/a
161,289 resultsCVE-2008-1835—ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsEPSS 4.0%CVE-2005-3682—Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameEPSS 4.0%CVE-2008-4927—Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a maEPSS 4.0%CVE-2018-4230—An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" componEPSS 4.0%CVE-2020-20951—In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files.EPSS 4.0%CVE-2008-5658—Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to writeEPSS 4.0%CVE-2002-0250—Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized usersEPSS 4.0%CVE-2017-10664—qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by EPSS 4.0%CVE-2012-1162—Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (EPSS 4.0%CVE-2017-2929—Adobe Acrobat Chrome extension version 15.1.0.3 and earlier have a DOM-based cross-site scripting vulnerability. Successful exploitation couEPSS 4.0%CVE-2014-4323—The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm InnovationEPSS 4.0%CVE-2000-0391—Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.EPSS 4.0%CVE-2017-15284—Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicioEPSS 4.0%CVE-2012-0878—Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attacEPSS 4.0%CVE-2000-0390—Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.EPSS 4.0%CVE-2010-2801—Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote aEPSS 4.0%CVE-2007-0707—Stack-based buffer overflow in GOM Player 2.0.12.3375 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with aEPSS 4.0%CVE-2015-7684—Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executabEPSS 4.0%CVE-2008-7160—The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live ConferenciEPSS 4.0%CVE-2016-9832—PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execEPSS 4.0%