Vulnerabilities in N/A
161,457 resultsCVE-2004-0033—admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.EPSS 2.8%CVE-2008-1367—gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and iEPSS 2.8%CVE-2020-15714—rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php scriEPSS 2.8%CVE-2014-3657—The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which alEPSS 2.8%CVE-2019-9106—The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or inclEPSS 2.8%CVE-2019-8427—daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.EPSS 2.8%CVE-2014-4823—The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and SEPSS 2.8%CVE-2004-1830—error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newEPSS 2.8%CVE-2015-0552—Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write EPSS 2.8%CVE-2020-15713—rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script usEPSS 2.8%CVE-2020-6019—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBaEPSS 2.8%CVE-2019-18236—Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a sEPSS 2.8%CVE-2017-7943—The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted filEPSS 2.8%CVE-2015-6575—SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackersEPSS 2.8%CVE-2015-6465—The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial oEPSS 2.8%CVE-2017-3104—Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.EPSS 2.8%CVE-2001-0051—IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain accesEPSS 2.8%CVE-2006-4600—slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary DiEPSS 2.8%CVE-2002-0095—The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which coulEPSS 2.8%CVE-2006-2074—Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to tEPSS 2.8%