Vulnerabilities in N/A

161,455 results
CVE-2008-2665—Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictEPSS 3.4%CVE-2009-2422—The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_EPSS 3.4%CVE-2011-2721—Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a deniaEPSS 3.4%CVE-2010-0441—Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, EPSS 3.4%CVE-2010-2949—bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer derEPSS 3.4%CVE-2008-5277—PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query.EPSS 3.4%CVE-2009-0363—Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involvEPSS 3.4%CVE-2018-1000537—Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) thEPSS 3.4%CVE-2019-15304—Lierda Grill Temperature Monitor V1.00_50006 has a default password of admin for the admin account, which allows an attacker to cause a DeniEPSS 3.4%CVE-2006-5192—PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHEPSS 3.4%CVE-2004-1539—Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game servEPSS 3.4%CVE-2008-2932—Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly executEPSS 3.4%CVE-2021-21996—An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file systeEPSS 3.4%CVE-2007-1144—Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via aEPSS 3.4%CVE-2020-7707CRITICALPrototype PollutionEPSS 3.4%CVE-2019-20204—The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVEPSS 3.4%CVE-2007-1063—The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-codeEPSS 3.4%CVE-2016-4311—Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack thEPSS 3.4%CVE-2021-42260—TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggereEPSS 3.4%CVE-2024-24112CRITICALxmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.EPSS 3.4%