Vulnerabilities in n/a
161,456 resultsCVE-2015-6249—The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 doeEPSS 2.8%CVE-2018-17098—The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruptionEPSS 2.8%CVE-2005-3503—chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS fielEPSS 2.8%CVE-2002-0970—The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, wEPSS 2.8%CVE-2019-17504—An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vulnerability allows remEPSS 2.8%CVE-2011-3446—Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackersEPSS 2.8%CVE-2006-2678—Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML viEPSS 2.8%CVE-2012-2225—360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction.EPSS 2.8%CVE-2004-1428—ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remEPSS 2.8%CVE-2022-40898HIGHAn issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via aEPSS 2.8%CVE-2006-5859—Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remoteEPSS 2.8%CVE-2008-2003—BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackEPSS 2.8%CVE-2006-0141—Qualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a denial of service (crash) via (1) malformed NTLMEPSS 2.8%CVE-2019-20393—A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyanEPSS 2.8%CVE-1999-0885—Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.EPSS 2.8%CVE-2012-5849—Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands vEPSS 2.8%CVE-2009-0157—Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a EPSS 2.8%CVE-2009-4627—Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitraryEPSS 2.8%CVE-2018-21025—In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced EPSS 2.8%CVE-2018-11116HIGHOpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call aEPSS 2.8%