Vulnerabilities in N/A
161,457 resultsCVE-2018-11357—In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addEPSS 2.8%CVE-2012-2404—wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site EPSS 2.8%CVE-2018-11356—In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c bEPSS 2.8%CVE-2015-2092—The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via aEPSS 2.8%CVE-2015-7569—SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the EPSS 2.8%CVE-2019-20917—An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built agaiEPSS 2.8%CVE-2021-23463HIGHXML External Entity (XXE) InjectionEPSS 2.8%CVE-2019-12414—In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLabEPSS 2.8%CVE-2020-7634—heroku-addonpool through 0.1.15 is vulnerable to Command Injection.EPSS 2.8%CVE-2004-0014—Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long EPSS 2.8%CVE-2004-2239—Buffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow attackers to cause a denial of service or execute arbitrary code.EPSS 2.8%CVE-2014-7209—run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via sheEPSS 2.8%CVE-2008-2512—Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackEPSS 2.8%CVE-2007-4904—RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-EPSS 2.8%CVE-2014-9234—Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to readEPSS 2.8%CVE-2006-0597—Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service (application crasEPSS 2.8%CVE-2007-2389—Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackersEPSS 2.8%CVE-2012-0503—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier,EPSS 2.8%CVE-2008-2878—Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers tEPSS 2.8%CVE-2018-5809—An error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to causeEPSS 2.8%