Vulnerabilities in n/a

161,400 results
CVE-2011-4882—The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) vEPSS 3.3%CVE-2017-9363—Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a craEPSS 3.3%CVE-2015-5942—FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or causeEPSS 3.3%CVE-2016-7295—The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, WinEPSS 3.3%CVE-2010-2235—template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of theEPSS 3.3%CVE-2007-2450—Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through EPSS 3.3%CVE-2018-16528—Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruptEPSS 3.3%CVE-2012-4739—Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote attackers to inject arbiEPSS 3.3%CVE-2016-7258—The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local usersEPSS 3.3%CVE-2007-5237—Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allEPSS 3.3%CVE-2008-3823—Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers tEPSS 3.3%CVE-2022-28568—Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attackeEPSS 3.3%CVE-2018-20303—In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a fiEPSS 3.3%CVE-2015-1038—p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.EPSS 3.3%CVE-2004-1402—SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.phEPSS 3.3%CVE-2015-2050—D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors.EPSS 3.3%CVE-2005-1531—Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows rEPSS 3.3%CVE-2006-3776—PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows remote attackers to exEPSS 3.3%CVE-2010-2601—Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server EPSS 3.3%CVE-2008-7052—Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute EPSS 3.3%