Vulnerabilities in N/A

161,395 results
CVE-2006-5068—PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 and earlier allowsEPSS 3.9%CVE-2006-5609—Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "\.\./" sequences EPSS 3.9%CVE-2007-2655—Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a formatEPSS 3.9%CVE-2018-19857—The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magiEPSS 3.9%CVE-2017-15293—Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or cEPSS 3.9%CVE-2025-25528MEDIUMMultiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on useEPSS 3.9%CVE-2006-4605—PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to execute arbitrary PHP coEPSS 3.9%CVE-2006-4055—Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allow remote attackerEPSS 3.9%CVE-2019-15538—An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp faiEPSS 3.9%CVE-2017-5970—The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service EPSS 3.9%CVE-2018-14358—An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH reEPSS 3.9%CVE-2006-2141—Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to inEPSS 3.9%CVE-2006-1431—Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script orEPSS 3.9%CVE-2017-6989—An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is afEPSS 3.9%CVE-2004-1985—Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTMLEPSS 3.9%CVE-2006-6094—Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) catID paraEPSS 3.9%CVE-2013-1705—Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows EPSS 3.9%CVE-2018-1000110—An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker witEPSS 3.9%CVE-2018-5221—Multiple buffer overflows in BarCodeWiz BarCode before 6.7 ActiveX control (BarcodeWiz.DLL) allow remote attackers to execute arbitrary codeEPSS 3.9%CVE-2007-3699—The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain vaEPSS 3.9%