Vulnerabilities in n/a

161,248 results
CVE-2004-2026—Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via EPSS 6.6%CVE-2017-15013—OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an aEPSS 6.6%CVE-2016-2242—Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php.EPSS 6.6%CVE-1999-0431—Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.EPSS 6.6%CVE-2008-7006—Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to adEPSS 6.6%CVE-2003-0802—Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical paEPSS 6.6%CVE-2017-12376—ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a EPSS 6.6%CVE-2003-0134—Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to cause a denial of seEPSS 6.6%CVE-2008-2419—Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arEPSS 6.6%CVE-2016-2099—Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to hEPSS 6.6%CVE-2013-4861—Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated usersEPSS 6.6%CVE-2020-35136—Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the EPSS 6.6%CVE-2022-4379HIGHA use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conEPSS 6.6%CVE-2022-22966—An authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider may be able to exploitEPSS 6.6%CVE-2016-1985—HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, reEPSS 6.6%CVE-2015-8358—Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and executEPSS 6.6%CVE-2004-0638—Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and EPSS 6.6%CVE-2018-13140—Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to doEPSS 6.6%CVE-2009-0659—Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown impact via a STATS lEPSS 6.6%CVE-2019-7260—Linear eMerge E3-Series devices have Cleartext Credentials in a Database.EPSS 6.6%