Vulnerabilities in n/a
161,399 resultsCVE-2022-37601—Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. ThEPSS 3.5%CVE-2014-2669—Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3EPSS 3.5%CVE-2017-11356—The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privilEPSS 3.5%CVE-2015-6855—hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of serEPSS 3.5%CVE-2013-2021—pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value iEPSS 3.5%CVE-2005-2176—Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remoteEPSS 3.5%CVE-2012-2401—Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of theEPSS 3.5%CVE-2019-12148—The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection EPSS 3.5%CVE-2009-5087—Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrEPSS 3.5%CVE-2014-5014—The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to EPSS 3.5%CVE-2008-4329—PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute EPSS 3.5%CVE-2015-1782—The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified EPSS 3.5%CVE-2004-2071—Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interEPSS 3.5%CVE-2001-1184—wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) iEPSS 3.5%CVE-2014-4690—Multiple directory traversal vulnerabilities in pfSense before 2.1.4 allow (1) remote attackers to read arbitrary .info files via a crafted EPSS 3.5%CVE-2014-4244—Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers toEPSS 3.5%CVE-2014-4263—Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect EPSS 3.5%CVE-2014-8653—Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.EPSS 3.5%CVE-2023-33443CRITICALIncorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrEPSS 3.5%CVE-2020-21012—Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to executEPSS 3.5%