Vulnerabilities in n/a
161,286 resultsCVE-2020-17368—Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injeEPSS 4.1%CVE-2020-17352—Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attaEPSS 4.1%CVE-2022-27776—A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirecEPSS 4.1%CVE-2005-4676—Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote aEPSS 4.1%CVE-2006-4915—Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrary web script or HTML EPSS 4.1%CVE-2006-1590—Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) AnalyEPSS 4.1%CVE-2016-10116—NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus deviceEPSS 4.1%CVE-2012-0463—The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, ThuEPSS 4.1%CVE-2018-11638—Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote autheEPSS 4.1%CVE-2007-4768—Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbEPSS 4.1%CVE-2007-2567—Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to execute arbitrary code viEPSS 4.1%CVE-2014-3500—Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.EPSS 4.1%CVE-2008-5197—SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameterEPSS 4.1%CVE-2015-8729—The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does notEPSS 4.1%CVE-2017-9362—ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.EPSS 4.1%CVE-2015-8733—The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2EPSS 4.1%CVE-2012-2370—Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a dEPSS 4.1%CVE-2016-9463—Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. NextcEPSS 4.1%CVE-2018-1000026—Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x netwoEPSS 4.1%CVE-2020-13692—PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.EPSS 4.1%