Vulnerabilities in n/a
161,455 resultsCVE-2012-1108—The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a craftEPSS 3.1%CVE-2015-2564—SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQEPSS 3.1%CVE-2012-3383—The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not pEPSS 3.1%CVE-2004-1176—Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly EPSS 3.1%CVE-1999-0817—Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certainEPSS 3.1%CVE-2012-4906—Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitEPSS 3.1%CVE-2004-0094—Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when usinEPSS 3.1%CVE-2003-0690—KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privilegEPSS 3.1%CVE-2004-0093—XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index whenEPSS 3.1%CVE-2016-7902—Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permiEPSS 3.1%CVE-2008-2051—The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyteEPSS 3.1%CVE-2012-0660—Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of serviceEPSS 3.1%CVE-2006-6484—The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise EPSS 3.1%CVE-2008-3912—libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors rEPSS 3.1%CVE-2010-3541—Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.EPSS 3.1%CVE-2021-28111—Draeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code execution by an authenticated attacker.EPSS 3.1%CVE-2016-3440—Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related toEPSS 3.1%CVE-2018-19183—ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" EPSS 3.1%CVE-2014-8712—The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x befoEPSS 3.1%CVE-2017-12967—The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remoteEPSS 3.1%