Vulnerabilities in n/a
161,271 resultsCVE-2018-18319—An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because apiEPSS 5.4%CVE-2007-5914—Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows remote authenticateEPSS 5.4%CVE-2016-4182—Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attEPSS 5.4%CVE-2006-2489—Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash)EPSS 5.4%CVE-2002-2257—Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitraryEPSS 5.4%CVE-2016-6981—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before EPSS 5.4%CVE-2002-2411—Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command.EPSS 5.4%CVE-2001-0629—HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privilegesEPSS 5.4%CVE-2011-0569—The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of serviceEPSS 5.4%CVE-2001-1274—Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.EPSS 5.4%CVE-2004-0078—Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of sEPSS 5.4%CVE-2015-0433—Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect avaEPSS 5.4%CVE-2007-4074—The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, andEPSS 5.4%CVE-2021-26541—The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.EPSS 5.4%CVE-2005-1046—Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.EPSS 5.4%CVE-2004-0785—Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1EPSS 5.4%CVE-2007-2375—The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgradeEPSS 5.4%CVE-2009-0012—Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode striEPSS 5.4%CVE-2015-1059—Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code EPSS 5.4%CVE-2007-0117—DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which EPSS 5.4%