Vulnerabilities in N/A
161,457 resultsCVE-2003-0456—VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not existEPSS 2.8%CVE-2021-21899HIGHA code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A speEPSS 2.8%CVE-2017-17946—A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" dataEPSS 2.8%CVE-2014-4413—WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service EPSS 2.8%CVE-2014-4479—WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allEPSS 2.8%CVE-2015-1120—WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows EPSS 2.8%CVE-2009-4808—admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting EPSS 2.8%CVE-2016-1000111—Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applicationEPSS 2.8%CVE-2019-20042—In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a EPSS 2.8%CVE-2005-2774—Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (server crash) and possiEPSS 2.8%CVE-2004-2144—Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.EPSS 2.8%CVE-2006-6648—PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attackers to execute arbitraEPSS 2.8%CVE-2018-19134—In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript documenEPSS 2.8%CVE-2021-45079—In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (EPSS 2.8%CVE-2011-4673—SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL cEPSS 2.8%CVE-2016-4574—Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a deniaEPSS 2.8%CVE-2022-37599—A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.EPSS 2.8%CVE-2012-5243—functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted requestEPSS 2.8%CVE-2020-11890—An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuEPSS 2.8%CVE-2022-25883MEDIUMVersions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when EPSS 2.8%