Vulnerabilities in N/A

161,455 results
CVE-2012-4920—Directory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for WEPSS 3.3%CVE-2019-12549—WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingEPSS 3.3%CVE-2017-1000450—In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer oEPSS 3.3%CVE-2015-2269—Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.EPSS 3.3%CVE-2012-5526—CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackerEPSS 3.3%CVE-2008-5023—Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechEPSS 3.3%CVE-2011-1156—feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of serviEPSS 3.3%CVE-2022-25809—Improper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices allows arbitrary voice command execution on thesEPSS 3.3%CVE-2011-5208—Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary fileEPSS 3.3%CVE-2011-1208—IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4)EPSS 3.3%CVE-2012-0841—libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-depenEPSS 3.3%CVE-2015-6171—The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 GoEPSS 3.3%CVE-2005-3518—SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_seaEPSS 3.3%CVE-2013-4271—The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allowEPSS 3.3%CVE-2016-1896—Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.0EPSS 3.3%CVE-2019-16734—Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execuEPSS 3.3%CVE-2019-17544—libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ charEPSS 3.3%CVE-2001-0285—Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a loEPSS 3.3%CVE-2020-25672—A memory leak vulnerability was found in Linux kernel in llcp_sock_connectEPSS 3.3%CVE-2016-5259—Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 alEPSS 3.3%