Vulnerabilities in n/a
161,457 resultsCVE-2004-2036—SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers tEPSS 2.7%CVE-2002-0751—CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (EPSS 2.7%CVE-2016-2560—Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 alEPSS 2.7%CVE-2020-13822—The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflEPSS 2.7%CVE-2021-32948—An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the EPSS 2.7%CVE-2021-26232—SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via tEPSS 2.7%CVE-2015-3238—The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, aEPSS 2.7%CVE-1999-0454—A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool suchEPSS 2.7%CVE-2021-32952—An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lackEPSS 2.7%CVE-2014-5068—Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a EPSS 2.7%CVE-2005-2346—Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a lonEPSS 2.7%CVE-2015-2946—Stack-based buffer overflow in the Open CAD Format Council SXF common library before 3.30 allows remote attackers to execute arbitrary code EPSS 2.7%CVE-2005-2323—Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to EPSS 2.7%CVE-2005-1402—Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products,EPSS 2.7%CVE-2010-3061—Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x befEPSS 2.7%CVE-2009-2159—backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create anEPSS 2.7%CVE-2017-11673—Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformeEPSS 2.7%CVE-2004-1002—Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet withEPSS 2.7%CVE-2021-25679—The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact aEPSS 2.7%CVE-2015-1428—Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL commands via the sefrengEPSS 2.7%