Vulnerabilities in n/a
161,455 resultsCVE-2013-1907—The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groupEPSS 2.9%CVE-2021-30503—The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath inEPSS 2.9%CVE-2018-14403—MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for assoEPSS 2.9%CVE-2010-4495—Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix SerEPSS 2.9%CVE-2015-5753—QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption aEPSS 2.9%CVE-2008-6231—Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and EPSS 2.9%CVE-2015-3779—QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption aEPSS 2.9%CVE-2015-3765—QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption aEPSS 2.9%CVE-2020-20221—Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm proceEPSS 2.9%CVE-2012-0194—The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a deniaEPSS 2.9%CVE-2009-0164—The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackEPSS 2.9%CVE-2019-9770—An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decodEPSS 2.9%CVE-2018-19515—In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the EPSS 2.9%CVE-2019-9773—An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decodEPSS 2.9%CVE-2018-8819—An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter EPSS 2.9%CVE-2006-4314—The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial of service (hang) viaEPSS 2.9%CVE-2008-5598—Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dotEPSS 2.9%CVE-2015-9246—An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP fEPSS 2.9%CVE-2009-4886—Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via a .. (dot dot) in thEPSS 2.9%CVE-2015-1197—cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in aEPSS 2.9%