Vulnerabilities in N/A
161,456 resultsCVE-2018-19432—An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will leadEPSS 3.0%CVE-2022-24168—Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. ThEPSS 3.0%CVE-2022-26994—Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerabEPSS 3.0%CVE-2017-8007—In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversEPSS 3.0%CVE-2019-20907MEDIUMIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.opeEPSS 3.0%CVE-2016-5101—Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a cEPSS 3.0%CVE-2017-17067—Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12,EPSS 3.0%CVE-2010-2104—Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files viaEPSS 3.0%CVE-2019-6288—Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the command1 HTTP header to the /EXCU_SHELL URI.EPSS 3.0%CVE-2020-25136—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.0%CVE-2010-5087—SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mEPSS 3.0%CVE-2013-2293—The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementallEPSS 3.0%CVE-2022-27413—Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php.EPSS 3.0%CVE-2009-3362—PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in tEPSS 3.0%CVE-2021-3570—A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a rEPSS 3.0%CVE-2004-2475—Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html iEPSS 3.0%CVE-2015-7677—The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which alloEPSS 3.0%CVE-2020-35662HIGHIn SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.EPSS 3.0%CVE-2018-4185—In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in tEPSS 3.0%CVE-2002-1565—Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execEPSS 3.0%