Vulnerabilities in n/a
161,292 resultsCVE-2014-1636—Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to execute arbitrary SQL cEPSS 3.8%CVE-2017-9359—The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 beEPSS 3.8%CVE-2011-0341—Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows remEPSS 3.8%CVE-2011-0045—The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truEPSS 3.8%CVE-2007-5939—The gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling frEPSS 3.8%CVE-2008-0419—Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of serviceEPSS 3.8%CVE-2010-3775—Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving EPSS 3.8%CVE-2006-7153—PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the paEPSS 3.8%CVE-2008-3331—Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary weEPSS 3.8%CVE-2006-7036—PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action EPSS 3.8%CVE-2008-3365—Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to iEPSS 3.8%CVE-2021-36363—Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.EPSS 3.8%CVE-2021-36365—Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.EPSS 3.8%CVE-2023-24055—KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clearEPSS 3.8%CVE-2006-5456—Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service anEPSS 3.8%CVE-2015-5567—Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.EPSS 3.8%CVE-2014-2135—Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remoEPSS 3.8%CVE-2006-0617—Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox securityEPSS 3.8%CVE-2006-0616—Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtaiEPSS 3.8%CVE-2021-32605—zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=seaEPSS 3.8%