Vulnerabilities in n/a
161,455 resultsCVE-2021-38593—Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill aEPSS 3.0%CVE-2005-3018—Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.EPSS 3.0%CVE-2016-7113—A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant MoEPSS 3.0%CVE-2012-3503—The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each dEPSS 3.0%CVE-2014-5298—FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upEPSS 3.0%CVE-2019-16965—resources/cmd.php in FusionPBX up to 4.5.7 suffers from a command injection vulnerability due to a lack of input validation, which allows auEPSS 3.0%CVE-2015-6659—SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to exeEPSS 3.0%CVE-2017-14229—There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attEPSS 3.0%CVE-2014-9624—CAPTCHA bypass vulnerability in MantisBT before 1.2.19.EPSS 3.0%CVE-2023-40278HIGHAn issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsEPSS 3.0%CVE-2011-1532—Unspecified vulnerability in the SNMP component on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-iEPSS 3.0%CVE-2018-3209—Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). The supported version that is affected is Java SE: 8u182. DEPSS 3.0%CVE-2014-2933—Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted EPSS 3.0%CVE-2005-1325—set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.EPSS 3.0%CVE-2004-1877—The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.EPSS 3.0%CVE-2001-0006—The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to moEPSS 3.0%CVE-2005-1547—Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrarEPSS 3.0%CVE-2011-0456—webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified veEPSS 3.0%CVE-2012-6602—The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated uEPSS 3.0%CVE-2012-6594—The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows rEPSS 3.0%