Vulnerabilities in N/A
161,457 resultsCVE-1999-0983—Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.EPSS 2.7%CVE-2018-5336—In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparEPSS 2.7%CVE-2014-2672—Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote atEPSS 2.7%CVE-2021-37334—Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code executionEPSS 2.7%CVE-2006-5211—Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5EPSS 2.7%CVE-2008-2293—admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting thEPSS 2.7%CVE-2007-3821—Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actEPSS 2.7%CVE-2006-6458—The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet SecurityEPSS 2.7%CVE-2012-2921—Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumEPSS 2.7%CVE-2009-3123—Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. (EPSS 2.7%CVE-2008-7219—Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3EPSS 2.7%CVE-2014-9491—The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial ofEPSS 2.7%CVE-2018-7420—In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed in wiretap/pcapng.c by adding a blocEPSS 2.7%CVE-2014-2251—The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which maEPSS 2.7%CVE-2012-1151—Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostEPSS 2.7%CVE-2020-15849—Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. A mEPSS 2.7%CVE-2009-0078—The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and EPSS 2.7%CVE-2024-42845HIGHAn eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to exEPSS 2.7%CVE-2018-7335—In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecEPSS 2.7%CVE-2008-3705—Stack-based buffer overflow in the CLogger::WriteFormated function in echoware/Logger.cpp in EchoVNC Linux before 1.1.2 allows remote echoSeEPSS 2.7%