Vulnerabilities in n/a
161,455 resultsCVE-2005-2337—Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag proteEPSS 3.3%CVE-2005-2301—PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a dEPSS 3.3%CVE-2005-0230—Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerEPSS 3.3%CVE-2022-23657—A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,EPSS 3.3%CVE-2007-2826—PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execute arbitrary PHP codeEPSS 3.3%CVE-2006-4586—The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform EPSS 3.3%CVE-2014-9622—Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackersEPSS 3.3%CVE-2018-1000997—A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/maEPSS 3.3%CVE-2022-30592—liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.EPSS 3.3%CVE-2016-5573—Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentialitEPSS 3.3%CVE-2018-16217—The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated aEPSS 3.3%CVE-2014-8596—Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the (1) EPSS 3.3%CVE-2018-0487—ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (EPSS 3.3%CVE-2002-1628—Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files viaEPSS 3.3%CVE-2016-9157—A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and poEPSS 3.3%CVE-2018-14679—An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validiEPSS 3.3%CVE-2020-7754HIGHRegular Expression Denial of Service (ReDoS)EPSS 3.3%CVE-2017-18199—realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a EPSS 3.3%CVE-2020-10569—SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unautEPSS 3.3%CVE-2013-2499—SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.EPSS 3.3%