Vulnerabilities in n/a
161,292 resultsCVE-2022-29327—D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel.EPSS 3.8%CVE-2006-1219—Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP filesEPSS 3.8%CVE-2002-0063—Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or languageEPSS 3.8%CVE-2006-0119—Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potenEPSS 3.8%CVE-2018-20676—In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.EPSS 3.8%CVE-2012-4867—Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote attackers to read arbiEPSS 3.8%CVE-2020-28001—SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.EPSS 3.8%CVE-2006-4953—Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via theEPSS 3.8%CVE-2006-3396—PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to eEPSS 3.8%CVE-2007-0019—Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code viaEPSS 3.8%CVE-2018-17240—There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensEPSS 3.8%CVE-2011-3453—Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of serviceEPSS 3.8%CVE-2013-7456—gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.EPSS 3.8%CVE-2016-3606—Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, inteEPSS 3.8%CVE-2022-1043—A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, EPSS 3.8%CVE-2022-27269—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.8%CVE-2017-15398—A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code executionEPSS 3.8%CVE-2022-27268—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.8%CVE-2019-12460—Web Port 1.19.1 allows XSS via the /access/setup type parameter.EPSS 3.8%CVE-2010-2540—mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that wEPSS 3.8%