Vulnerabilities in n/a

161,401 results
CVE-2015-3688—CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 3.3%CVE-2003-0565—Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a denial of service and poEPSS 3.3%CVE-2008-0422—SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commEPSS 3.3%CVE-2021-27370—The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.EPSS 3.3%CVE-2015-3687—CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 3.3%CVE-2017-17434—The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data strEPSS 3.3%CVE-2014-4629—EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary EPSS 3.3%CVE-2013-6032—cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.PEPSS 3.3%CVE-2013-5777—Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remotEPSS 3.3%CVE-2012-1936—The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of aEPSS 3.3%CVE-2015-3686—CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 3.3%CVE-2013-5810—Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentialityEPSS 3.3%CVE-2005-0428—The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a ranEPSS 3.3%CVE-2022-25241—In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).EPSS 3.3%CVE-2012-3845—Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a long string in an iniEPSS 3.3%CVE-2021-30230—The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commandEPSS 3.3%CVE-2016-6223—The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of servEPSS 3.3%CVE-2010-3711—libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote autheEPSS 3.3%CVE-2005-3280—Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machineEPSS 3.3%CVE-2021-30232—The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands vEPSS 3.3%