Vulnerabilities in N/A

161,455 results
CVE-2013-4075—epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which alEPSS 3.2%CVE-2014-10397—The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.EPSS 3.2%CVE-2009-1516—Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow contextEPSS 3.2%CVE-2007-4682—CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitEPSS 3.2%CVE-2004-2386—Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arEPSS 3.2%CVE-2018-18324—CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter, or the admin/indexEPSS 3.2%CVE-2021-42751—A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to injecEPSS 3.2%CVE-2019-7843—Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitatioEPSS 3.2%CVE-2005-0598—The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause EPSS 3.2%CVE-2015-5609—Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary fileEPSS 3.2%CVE-2021-27885—usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.EPSS 3.2%CVE-2021-42750—A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to injecEPSS 3.2%CVE-2004-0458HIGHmah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null poinEPSS 3.2%CVE-2006-1031—config/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SG_HOME parameter.EPSS 3.2%CVE-2006-3777—PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code vEPSS 3.2%CVE-2024-57248MEDIUMDirectory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure,EPSS 3.2%CVE-2002-1982—Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory existEPSS 3.2%CVE-2006-2267—Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors in the "emEPSS 3.2%CVE-2018-17182—An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overEPSS 3.2%CVE-2004-0038—McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTPEPSS 3.2%