Vulnerabilities in N/A
161,262 resultsCVE-2007-1851—Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to include and execute aEPSS 6.7%CVE-2002-1986—Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing EPSS 6.7%CVE-2002-2295—Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly eEPSS 6.7%CVE-2018-8941—Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackersEPSS 6.7%CVE-2009-1711—WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitraEPSS 6.7%CVE-2019-12594—DOSBox 0.74-2 has Incorrect Access Control.EPSS 6.7%CVE-2019-5018HIGHAn exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command cEPSS 6.7%CVE-2006-0700—imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document thEPSS 6.7%CVE-2004-2385—EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.EPSS 6.7%CVE-2017-6191—Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename.EPSS 6.7%CVE-2007-2005—Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute aEPSS 6.7%CVE-2014-3008—Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm paramEPSS 6.7%CVE-2016-10195—The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving thEPSS 6.7%CVE-2020-10948—Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, aEPSS 6.7%CVE-2015-8740—The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not vaEPSS 6.7%CVE-2010-3975—Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code andEPSS 6.7%CVE-2004-0489—Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitEPSS 6.7%CVE-2009-4535—Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.EPSS 6.7%CVE-2016-2195—Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory aEPSS 6.7%CVE-2019-9638—An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized rEPSS 6.7%