Vulnerabilities in n/a
161,292 resultsCVE-2010-2540—mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that wEPSS 3.8%CVE-2013-4237—sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial ofEPSS 3.8%CVE-2014-0476—The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a EPSS 3.8%CVE-2016-9138—PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to causEPSS 3.8%CVE-2023-33592—Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=systeEPSS 3.8%CVE-2011-3341—Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or poEPSS 3.8%CVE-2014-2134—Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allEPSS 3.8%CVE-2020-28971—An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could alloEPSS 3.8%CVE-2014-1540—Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla FiEPSS 3.8%CVE-2006-4830—Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknownEPSS 3.8%CVE-2005-0611—Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attEPSS 3.8%CVE-2007-5772—Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitraEPSS 3.8%CVE-2015-2755—Multiple cross-site request forgery (CSRF) vulnerabilities in the AB Google Map Travel (AB-MAP) plugin before 4.0 for WordPress allow remoteEPSS 3.8%CVE-2006-0959—SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote attackers to executeEPSS 3.8%CVE-2007-1678—Cross-site scripting (XSS) vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HEPSS 3.8%CVE-2011-4187—Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to eEPSS 3.8%CVE-2020-24659—An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation aEPSS 3.8%CVE-2023-23295HIGHKorenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an mEPSS 3.8%CVE-2018-14470HIGHThe Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().EPSS 3.8%CVE-2018-14466—The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().EPSS 3.8%