Vulnerabilities in n/a
161,279 resultsCVE-2018-14567—libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that trigEPSS 4.3%CVE-2012-0061—The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attaEPSS 4.3%CVE-2006-2898—The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to cause a denial of serEPSS 4.3%CVE-2009-1721—The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause aEPSS 4.3%CVE-2005-0359—The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restEPSS 4.3%CVE-2006-4081—preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacEPSS 4.3%CVE-2004-2758—Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a EPSS 4.3%CVE-2015-6486—SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote EPSS 4.3%CVE-2001-1113—Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directoriesEPSS 4.3%CVE-2006-3683—PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code viEPSS 4.3%CVE-2021-36798—A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers tEPSS 4.3%CVE-2018-5951—An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS boEPSS 4.3%CVE-2020-29472—EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access usingEPSS 4.3%CVE-2006-0502—PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enabled, allows remote atEPSS 4.3%CVE-2022-30776—atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.EPSS 4.3%CVE-2006-4741—PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary coEPSS 4.3%CVE-2005-1551—Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may EPSS 4.3%CVE-2006-2487—Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a EPSS 4.3%CVE-2005-0255—String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do EPSS 4.3%CVE-2004-0676—Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbiEPSS 4.3%