Vulnerabilities in N/A

161,399 results
CVE-2005-0152—PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."EPSS 3.6%CVE-2014-6609—The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crashEPSS 3.6%CVE-2008-6751—Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allows remote attackers toEPSS 3.6%CVE-2019-9927—Caret before 2019-02-22 allows Remote Code Execution.EPSS 3.6%CVE-2017-8287—FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour functEPSS 3.6%CVE-2014-0489—APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbEPSS 3.6%CVE-2005-0783—Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filEPSS 3.6%CVE-2006-1515—Buffer overflow in the addnewword function in typespeed 0.4.4 and earlier might allow remote attackers to execute arbitrary code via unknownEPSS 3.6%CVE-2013-2184—Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via theEPSS 3.6%CVE-2014-2606—Unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0 allows remote authenticated users to gain prEPSS 3.6%CVE-2014-0490—The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to executEPSS 3.6%CVE-2012-2038—Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 EPSS 3.6%CVE-2005-2480—Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the EPSS 3.6%CVE-2013-5902—Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability viaEPSS 3.6%CVE-2018-19210—In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of EPSS 3.6%CVE-2018-9148—Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers EPSS 3.6%CVE-2002-2129—Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arEPSS 3.6%CVE-2005-1289—index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and pEPSS 3.6%CVE-2004-0680—Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password EPSS 3.6%CVE-2002-1691—Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain EPSS 3.6%