Vulnerabilities in n/a
161,456 resultsCVE-2016-10082—include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack duringEPSS 2.9%CVE-2020-15586—Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, bEPSS 2.9%CVE-2014-4115—fastfat.sys (aka the FASTFAT driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 does noEPSS 2.9%CVE-2008-5525—ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML EPSS 2.9%CVE-2009-2946—Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crEPSS 2.9%CVE-2018-16646—In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leveragEPSS 2.9%CVE-2018-4242—An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor" component. It allowEPSS 2.9%CVE-2020-9320—Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of AntiviEPSS 2.9%CVE-2001-0174—Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary cEPSS 2.9%CVE-2018-1000074—RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 seriesEPSS 2.9%CVE-2006-0804—Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflowEPSS 2.9%CVE-2006-0686—add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative usEPSS 2.9%CVE-1999-1177—Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pEPSS 2.9%CVE-2011-3448—Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial EPSS 2.9%CVE-2008-5335—SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows remote attackers to EPSS 2.9%CVE-2002-0553—Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injectEPSS 2.9%CVE-2007-2728—The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issueEPSS 2.9%CVE-2016-6150—The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass inEPSS 2.9%CVE-2018-9110—Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a reEPSS 2.9%CVE-2019-13352—WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature. EPSS 2.9%