Vulnerabilities in n/a
161,455 resultsCVE-2018-20786—libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (aEPSS 2.9%CVE-2021-34166—A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin.EPSS 2.9%CVE-2020-15598—Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "Trustwave has signaledEPSS 2.9%CVE-2017-12216—A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write EPSS 2.9%CVE-2016-6173—NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone trEPSS 2.9%CVE-2018-5754—Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-EPSS 2.9%CVE-2021-33562—A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTMEPSS 2.9%CVE-2019-13379—On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenEPSS 2.9%CVE-2004-0485—The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a diEPSS 2.9%CVE-2015-2698—The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly aEPSS 2.9%CVE-2004-1847—News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in tEPSS 2.9%CVE-2010-0853—Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion MiddlewaEPSS 2.9%CVE-2012-4086—A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commandsEPSS 2.9%CVE-2005-2764—Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly execute arbitrary codeEPSS 2.9%CVE-2007-3948—connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a EPSS 2.9%CVE-2006-3945—The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background prEPSS 2.9%CVE-2016-4688—An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affeEPSS 2.9%CVE-2006-1225—CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-maiEPSS 2.9%CVE-2013-4319—pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrictEPSS 2.9%CVE-2011-4533—zenAdminSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a denial of service (daemon crash) or possiblEPSS 2.9%