Vulnerabilities in N/A
161,457 resultsCVE-2017-17083—In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c bEPSS 2.7%CVE-2005-2407—A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window aboveEPSS 2.7%CVE-2007-1025—PHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitEPSS 2.7%CVE-2009-1282—SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQLEPSS 2.7%CVE-2002-0774—Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the EPSS 2.7%CVE-2001-0842—Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and EPSS 2.7%CVE-2004-1158—Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from oneEPSS 2.7%CVE-2001-0841—Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privilegeEPSS 2.7%CVE-2007-1299—PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP cEPSS 2.7%CVE-2014-9635—Jenkins before 1.586 does not set the HttpOnly flag in a Set-Cookie header for session cookies when run on Tomcat 7.0.41 or later, which makEPSS 2.7%CVE-2015-3270—Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectorsEPSS 2.7%CVE-2014-9634—Jenkins before 1.586 does not set the secure flag on session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote atEPSS 2.7%CVE-2006-1254—Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. NOEPSS 2.7%CVE-2013-7487—On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attacEPSS 2.7%CVE-2006-6634—Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for Mambo allow remote atEPSS 2.7%CVE-2006-1002—NETGEAR WGT624 Wireless DSL router has a default account of super_username "Gearguy" and super_passwd "Geardog", which allows remote attackeEPSS 2.7%CVE-2014-3619—The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000EPSS 2.7%CVE-2020-11522—libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read.EPSS 2.7%CVE-2016-7536—magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted profile.EPSS 2.7%CVE-2021-28831HIGHdecompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or seEPSS 2.7%