Vulnerabilities in N/A
161,457 resultsCVE-2020-17443—An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet'EPSS 2.8%CVE-2016-5832—The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.EPSS 2.8%CVE-2015-2694—The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has beeEPSS 2.8%CVE-2000-0100—The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacingEPSS 2.8%CVE-2007-1268—Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishingEPSS 2.8%CVE-2013-2199—The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related toEPSS 2.8%CVE-2015-3768—Integer overflow in the kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged EPSS 2.8%CVE-2015-4542—EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion EPSS 2.8%CVE-2015-4717—The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $_GEPSS 2.8%CVE-2008-4758—Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. (dot dot)EPSS 2.8%CVE-2008-2969—Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackerEPSS 2.8%CVE-2007-1269—GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail from visually distinguiEPSS 2.8%CVE-2001-0927—Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execuEPSS 2.8%CVE-2004-0522—Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.EPSS 2.8%CVE-2009-0461—Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer vaEPSS 2.8%CVE-2012-0365—Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and EPSS 2.8%CVE-2021-42169—The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code (by: oretnom23 ) is vulnerable from remote SQL-InjecEPSS 2.8%CVE-2016-1964—Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote EPSS 2.8%CVE-2009-0460—Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the admEPSS 2.8%CVE-2017-8370—IrfanView version 4.44 (32bit) with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service (Heap CorEPSS 2.8%