Vulnerabilities in N/A
161,401 resultsCVE-2004-0302—Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter iEPSS 3.4%CVE-2019-17221—PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability EPSS 3.4%CVE-2014-4389—Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context viaEPSS 3.4%CVE-2014-4381—Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arEPSS 3.4%CVE-2015-2183—Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commEPSS 3.4%CVE-2008-0196—Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (dot doEPSS 3.4%CVE-2018-4190—An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on WindoEPSS 3.4%CVE-2005-4202—Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2)EPSS 3.4%CVE-1999-0416—Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET portEPSS 3.4%CVE-2005-3789—Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) fEPSS 3.4%CVE-2022-26189—TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login iEPSS 3.4%CVE-2022-26188—TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost.EPSS 3.4%CVE-2023-49226—An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allowEPSS 3.4%CVE-2007-5266—Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.2EPSS 3.4%CVE-2021-37372—Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP filEPSS 3.4%CVE-2017-8365—The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and applicatioEPSS 3.4%CVE-2017-8362—The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and applicatEPSS 3.4%CVE-2007-3946—mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectorsEPSS 3.4%CVE-2005-0762—Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI iEPSS 3.4%CVE-2017-9766—In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in EPSS 3.4%