Vulnerabilities in N/A

161,189 results
CVE-2014-4643—Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (applEPSS 8.8%CVE-2011-3642—Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 andEPSS 8.8%CVE-2015-3184—mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anEPSS 8.8%CVE-2015-5195—ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statiEPSS 8.8%CVE-2013-3239—phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to executeEPSS 8.8%CVE-2020-20300—SQL injection vulnerability in the wp_where function in WeiPHP 5.0.EPSS 8.8%CVE-2018-12292—A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.EPSS 8.8%CVE-2018-18759—Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.EPSS 8.8%CVE-2014-10079—In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of thEPSS 8.7%CVE-2023-31902CRITICALRPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).EPSS 8.7%CVE-2013-4338—wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackEPSS 8.7%CVE-2007-1998—Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email fEPSS 8.7%CVE-2003-1260—Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.EPSS 8.7%CVE-2009-0885—Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (apEPSS 8.7%CVE-2011-3489—RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) viaEPSS 8.7%CVE-2021-26814—Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/fileEPSS 8.7%CVE-2022-29153—HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent fEPSS 8.7%CVE-2007-0886—Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and posEPSS 8.7%CVE-2010-1028—Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 EPSS 8.7%CVE-2019-16199—eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web iEPSS 8.7%