Vulnerabilities in N/A
161,400 resultsCVE-2005-0247—Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number ofEPSS 3.5%CVE-2008-2009—Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of sEPSS 3.5%CVE-2021-23165—A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary coEPSS 3.5%CVE-2018-15919MEDIUMRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a targEPSS 3.5%CVE-2014-2494—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availEPSS 3.5%CVE-2014-4260—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticaEPSS 3.5%CVE-2007-2157—Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (dot EPSS 3.5%CVE-2018-17540—The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.EPSS 3.5%CVE-2014-4258—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticateEPSS 3.5%CVE-2011-5102—The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109, 7.1.1 before HotfixEPSS 3.5%CVE-2013-3527—Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the paEPSS 3.5%CVE-2019-19598—D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestaEPSS 3.5%CVE-2021-23368MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 3.5%CVE-2017-11449—coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackeEPSS 3.5%CVE-2009-1447—Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitraEPSS 3.5%CVE-2006-1543—Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands EPSS 3.5%CVE-2011-10005MEDIUMEasyFTP MKD Command buffer overflowEPSS 3.5%CVE-2017-0379—Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret EPSS 3.5%CVE-2019-13450—In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the vEPSS 3.5%CVE-2004-2170—Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files viEPSS 3.5%