Vulnerabilities in N/A

161,455 results
CVE-2024-21512HIGHVersions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields aEPSS 3.1%CVE-2025-56127HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request tEPSS 3.1%CVE-2010-4257—SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated uEPSS 3.1%CVE-2016-0889—An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary filesEPSS 3.1%CVE-2007-2205—PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1.5.4, allows remote EPSS 3.1%CVE-2018-11813—libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.EPSS 3.1%CVE-2014-4486—IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists EPSS 3.1%CVE-2010-0360—Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the conteEPSS 3.1%CVE-2022-28738—A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp fromEPSS 3.1%CVE-2014-6408—Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container bEPSS 3.1%CVE-2021-44255—Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration bEPSS 3.1%CVE-2004-1215—Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, which causes a "messaEPSS 3.1%CVE-2005-0382—Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP packet, which triggers aEPSS 3.1%CVE-2008-3799—Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote aEPSS 3.1%CVE-2016-9366CRITICALAn issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pEPSS 3.1%CVE-2008-5242—demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling calloc for STSD_ATOM EPSS 3.1%CVE-2000-0570—FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending anEPSS 3.1%CVE-2008-3813—Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a deniaEPSS 3.1%CVE-2008-5956—Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote EPSS 3.1%CVE-2012-5070—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers tEPSS 3.1%