Vulnerabilities in n/a

161,455 results
CVE-2008-4200—Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to cEPSS 3.2%CVE-2020-28173—Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a mEPSS 3.2%CVE-2017-5933—Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly genEPSS 3.2%CVE-2009-3376—Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO oEPSS 3.2%CVE-2006-2324—180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent atEPSS 3.2%CVE-2003-0310—Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.EPSS 3.2%CVE-2020-17439—An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate tEPSS 3.2%CVE-2016-7457—VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual macEPSS 3.2%CVE-2022-22826HIGHnextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.2%CVE-2004-0218—isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-lenEPSS 3.2%CVE-2006-3158—index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypaEPSS 3.2%CVE-2006-5021CRITICALMultiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (EPSS 3.2%CVE-2007-3310—Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara pEPSS 3.2%CVE-2022-22827HIGHstoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.2%CVE-2001-0015—Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisibleEPSS 3.2%CVE-2014-1569—The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.1EPSS 3.2%CVE-2011-0115—The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM maniEPSS 3.2%CVE-2012-1050—Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, alEPSS 3.2%CVE-2011-0149—WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allEPSS 3.2%CVE-2011-0132—Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation iEPSS 3.2%