Vulnerabilities in n/a
161,455 resultsCVE-2004-1866—nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, which triggers a null dEPSS 3.2%CVE-2004-1109—The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and EPSS 3.2%CVE-2014-5216—Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbiEPSS 3.2%CVE-2014-7200—Cross-site scripting (XSS) vulnerability in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlieEPSS 3.2%CVE-2012-6505—Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to injecEPSS 3.2%CVE-2005-4319—Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via EPSS 3.2%CVE-2015-0855—The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters EPSS 3.2%CVE-2019-10633—An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated aEPSS 3.2%CVE-2002-0922—CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) defaulEPSS 3.2%CVE-2016-1000129—Reflected XSS in wordpress plugin defa-online-image-protector v3.3EPSS 3.2%CVE-2014-9412—Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary EPSS 3.2%CVE-2013-4484—Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET requeEPSS 3.2%CVE-2015-2828—CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obEPSS 3.2%CVE-2002-1248—Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of serviceEPSS 3.2%CVE-2021-26601—ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.EPSS 3.2%CVE-2010-3087—LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly executEPSS 3.2%CVE-2014-9092—libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.EPSS 3.2%CVE-2021-22968—A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concreteEPSS 3.2%CVE-2015-8212—CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code viaEPSS 3.2%CVE-2004-0960—FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) EPSS 3.2%