Vulnerabilities in N/A
161,398 resultsCVE-2007-2367—Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced applicaEPSS 3.7%CVE-2019-14657—Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate theEPSS 3.7%CVE-2021-23497HIGHPrototype PollutionEPSS 3.7%CVE-2014-9745—The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) EPSS 3.7%CVE-2014-9848—Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).EPSS 3.7%CVE-2008-5749—Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via theEPSS 3.7%CVE-2004-0364—The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers toEPSS 3.7%CVE-2013-5852—Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote EPSS 3.7%CVE-2009-2471—The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to executEPSS 3.7%CVE-2014-2419—Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availEPSS 3.7%CVE-2019-16730—processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitEPSS 3.7%CVE-2016-9941—Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (aEPSS 3.7%CVE-2015-5066—Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject arbitrary web script oEPSS 3.7%CVE-2014-1216—FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_REPSS 3.7%CVE-2019-9900MEDIUMWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote atEPSS 3.7%CVE-2008-4380—The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related EPSS 3.7%CVE-2008-7065—Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crEPSS 3.7%CVE-2012-2393—epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly constrEPSS 3.7%CVE-2014-9610—Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresseEPSS 3.7%CVE-2014-3738—Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the title of a dEPSS 3.7%