Vulnerabilities in n/a

161,457 results
CVE-2017-3861—Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow EPSS 2.8%CVE-2021-37348—Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php.EPSS 2.8%CVE-2012-2977—The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted inputEPSS 2.8%CVE-2010-0984—Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackerEPSS 2.8%CVE-2015-7103—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2015-7100—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2017-3862—Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow EPSS 2.8%CVE-2013-1859—The Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the configuration options, which allows remote attEPSS 2.8%CVE-2008-3812—Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers EPSS 2.8%CVE-1999-0465—Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.EPSS 2.8%CVE-2006-5593—Buffer overflow in Desknet's (niokeru) before 5.0J R1.0 might allow remote authenticated users to execute arbitrary code via unspecified vecEPSS 2.8%CVE-2012-4207—The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, ThundeEPSS 2.8%CVE-2006-3463—The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-EPSS 2.8%CVE-2013-0975—Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of EPSS 2.8%CVE-2006-6138—Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute EPSS 2.8%CVE-2021-46071—A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panEPSS 2.8%CVE-2021-46068—A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.EPSS 2.8%CVE-2021-46073—A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section iEPSS 2.8%CVE-2021-46072—A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login paneEPSS 2.8%CVE-2005-0720—PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifEPSS 2.8%