Vulnerabilities in n/a

161,455 results
CVE-2021-0158MEDIUMImproper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of EPSS 3.0%CVE-2016-7505—A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439dEPSS 3.0%CVE-2013-6708—Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui6088EPSS 3.0%CVE-2014-3354—Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG andEPSS 3.0%CVE-2015-4756—Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vecEPSS 3.0%CVE-2010-4781—index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitiEPSS 3.0%CVE-2018-9018—In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulneEPSS 3.0%CVE-2009-3009—Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrEPSS 3.0%CVE-2005-1676—Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a bEPSS 3.0%CVE-2020-11666—CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.EPSS 3.0%CVE-2018-5758—The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a craEPSS 3.0%CVE-2009-4214—Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attEPSS 3.0%CVE-2019-16894—download.php in inoERP 4.15 allows SQL injection through insecure deserialization.EPSS 3.0%CVE-2015-1882—Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gaEPSS 3.0%CVE-2007-5071—Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files aEPSS 3.0%CVE-2013-4549—QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity ExpEPSS 3.0%CVE-2016-1481—A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenEPSS 3.0%CVE-2017-11290—An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has beeEPSS 3.0%CVE-2015-6965—Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remoteEPSS 3.0%CVE-2012-3647—WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptiEPSS 3.0%