Vulnerabilities in N/A

161,401 results
CVE-2004-1706—The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute aEPSS 3.4%CVE-2006-6203—Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows remote attackers to reEPSS 3.4%CVE-2011-5212—SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) usEPSS 3.4%CVE-2014-1927—The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrarEPSS 3.4%CVE-2013-4385—Buffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3EPSS 3.4%CVE-2015-7178—The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on WEPSS 3.4%CVE-2019-12936HIGHBlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.EPSS 3.4%CVE-2015-0803—The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted vEPSS 3.4%CVE-2015-0804—The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace vEPSS 3.4%CVE-2007-2147—admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows reEPSS 3.4%CVE-2006-3997—PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allows remote attackers EPSS 3.4%CVE-2013-1802—The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct EPSS 3.4%CVE-2001-0250—The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the webEPSS 3.4%CVE-2016-1000133—Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1EPSS 3.4%CVE-2019-7301—Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metacharacters in the indexEPSS 3.4%CVE-2017-15878—A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the ContactEPSS 3.4%CVE-2006-2871—PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP codEPSS 3.4%CVE-2016-1000136—Reflected XSS in wordpress plugin heat-trackr v1.0EPSS 3.4%CVE-2011-4868—The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly EPSS 3.4%CVE-2000-0708—Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of nuEPSS 3.4%