Vulnerabilities in n/a
161,456 resultsCVE-2020-9491—In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by prEPSS 2.9%CVE-2014-4391—The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows rEPSS 2.9%CVE-2006-6044—PHP remote file inclusion vulnerability in gallery_top.inc.php in PHPQuickGallery 1.9 and earlier allows remote attackers to execute arbitraEPSS 2.9%CVE-2014-3696—nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (EPSS 2.9%CVE-2014-3695—markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application cEPSS 2.9%CVE-2007-6459—Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host EPSS 2.9%CVE-2014-8654—Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway hardware EPSS 2.9%CVE-2006-4989—Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbnail.php, (2) functionsEPSS 2.9%CVE-2018-10779—TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.EPSS 2.9%CVE-2006-6691—Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote attackers to execute arbitrary PEPSS 2.9%CVE-2006-6850—PHP remote file inclusion vulnerability in include.php in the Roster Module (character_roster) in Shadowed Portal 5.7 allows remote attackerEPSS 2.9%CVE-2015-6612—libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internaEPSS 2.9%CVE-2006-5811—PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled, allows remote attackEPSS 2.9%CVE-2003-1162—index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, foruEPSS 2.9%CVE-2010-3789—QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrEPSS 2.9%CVE-2005-1645—Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which allows remote attackeEPSS 2.9%CVE-2005-3728—Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote EPSS 2.9%CVE-2010-3793—QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrEPSS 2.9%CVE-2011-3267—PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (EPSS 2.9%CVE-2013-0252—boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequencEPSS 2.9%