Vulnerabilities in N/A

161,148 results
CVE-2009-1833—The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to EPSS 9.2%CVE-2009-1832—Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service EPSS 9.2%CVE-2005-0828—highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allowsEPSS 9.2%CVE-2014-0166—The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determiEPSS 9.2%CVE-2014-5112—maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang EPSS 9.2%CVE-2012-0230—PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers EPSS 9.2%CVE-2015-3210—Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regularEPSS 9.2%CVE-2015-4588—Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or posEPSS 9.2%CVE-2011-5219—Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a ..EPSS 9.2%CVE-2007-6318—SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commandEPSS 9.2%CVE-2014-3004—The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External EntityEPSS 9.2%CVE-2013-0992—WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (meEPSS 9.2%CVE-2014-3596—The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's CEPSS 9.2%CVE-2004-2496—The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a laEPSS 9.2%CVE-2008-0623—Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to EPSS 9.2%CVE-2014-3848—The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to obtain database credeEPSS 9.1%CVE-2023-31742HIGHThere is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web managemEPSS 9.1%CVE-2002-0652—xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered EPSS 9.1%CVE-2007-6276—The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers toEPSS 9.1%CVE-2021-26937—encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or EPSS 9.1%