Vulnerabilities in N/A

161,457 results
CVE-2012-2275—Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authenticationEPSS 2.7%CVE-2006-2179—Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameteEPSS 2.7%CVE-2010-2786—Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspEPSS 2.7%CVE-2015-4807—Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticEPSS 2.7%CVE-2018-10753—Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial oEPSS 2.7%CVE-2020-10971—An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution oEPSS 2.7%CVE-2012-0024—MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisionEPSS 2.7%CVE-2016-4731—WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory coEPSS 2.7%CVE-2015-2701—Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests EPSS 2.7%CVE-2016-4729—WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory coEPSS 2.7%CVE-2005-4485—Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HEPSS 2.7%CVE-2006-2214—Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionEPSS 2.7%CVE-2019-17192—The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before aEPSS 2.7%CVE-2018-16797—A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file wiEPSS 2.7%CVE-2011-0987—The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properEPSS 2.7%CVE-2019-7389—An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remEPSS 2.7%CVE-2007-4726—Directory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.EPSS 2.7%CVE-2015-2991—Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data.EPSS 2.7%CVE-2021-27213—config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.EPSS 2.7%CVE-2020-25710—A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to fEPSS 2.7%