Vulnerabilities in n/a
161,457 resultsCVE-2021-37351—Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded pages through a crafEPSS 2.8%CVE-2021-20314—Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially codeEPSS 2.8%CVE-2008-6799—connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting EPSS 2.8%CVE-2013-6982—The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and EPSS 2.8%CVE-2012-5069—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier,EPSS 2.8%CVE-2015-0478—Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiaEPSS 2.8%CVE-2007-1269—GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail from visually distinguiEPSS 2.8%CVE-2004-0590—FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strEPSS 2.8%CVE-2015-2694—The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has beeEPSS 2.8%CVE-2018-12114—Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.EPSS 2.8%CVE-2015-8781—tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogEPSS 2.8%CVE-2007-2202—PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web Services (ACVSWS) PHPEPSS 2.8%CVE-2016-5832—The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.EPSS 2.8%CVE-2007-1268—Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishingEPSS 2.8%CVE-2013-3735HIGHThe Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows coEPSS 2.8%CVE-2000-0100—The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacingEPSS 2.8%CVE-2008-4758—Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. (dot dot)EPSS 2.8%CVE-2015-6392—Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackerEPSS 2.8%CVE-2021-27230—ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::saveEPSS 2.8%CVE-2018-18638—A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commandEPSS 2.8%