Vulnerabilities in N/A
161,132 resultsCVE-2001-0405—ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT cEPSS 10.3%CVE-1999-1467—Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to thEPSS 10.2%CVE-2009-3546—The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certaEPSS 10.2%CVE-2010-4326—Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execuEPSS 10.2%CVE-2021-30465—runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be ablEPSS 10.2%CVE-2009-0922—PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumptioEPSS 10.2%CVE-2022-23747—In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed EPSS 10.2%CVE-2007-2498—libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: somEPSS 10.2%CVE-2018-15156—OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands byEPSS 10.2%CVE-2018-15155—OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands byEPSS 10.2%CVE-2012-6303—Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, EPSS 10.2%CVE-2018-15154—OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands byEPSS 10.2%CVE-2016-1995—HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.EPSS 10.2%CVE-2007-5301—Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.8EPSS 10.2%CVE-2001-0817—Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gaEPSS 10.2%CVE-1999-0412—In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.EPSS 10.2%CVE-2015-7182—Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as usedEPSS 10.2%CVE-2005-4718—Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(EPSS 10.2%CVE-2011-4191—Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitraEPSS 10.2%CVE-1999-0267—Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.EPSS 10.2%