Vulnerabilities in N/A
161,457 resultsCVE-2018-18661—An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.EPSS 2.9%CVE-2021-33965—China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and thEPSS 2.9%CVE-2009-1050—Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie.EPSS 2.9%CVE-2004-2636—TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.EPSS 2.9%CVE-2000-0739—Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbiEPSS 2.9%CVE-2005-2956—ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and preEPSS 2.9%CVE-2010-3789—QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrEPSS 2.9%CVE-2005-3728—Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote EPSS 2.9%CVE-2010-3793—QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrEPSS 2.9%CVE-2015-0713—The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series SoftwaEPSS 2.9%CVE-2011-3267—PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (EPSS 2.9%CVE-2013-0252—boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequencEPSS 2.9%CVE-2021-33964—China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST rEPSS 2.9%CVE-2019-20367—nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).EPSS 2.9%CVE-2005-1645—Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which allows remote attackeEPSS 2.9%CVE-2005-3432—MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * EPSS 2.9%CVE-2003-1162—index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, foruEPSS 2.9%CVE-2010-3205—PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a UREPSS 2.9%CVE-2005-2484—Buffer overflow in the rdb_query function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code.EPSS 2.9%CVE-2020-29551—An issue was discovered in URVE Build 24.03.2020. Using the _internal/pc/shutdown.php path, it is possible to shutdown the system. Among othEPSS 2.9%