Vulnerabilities in n/a

161,395 results
CVE-2012-3334—Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticEPSS 3.7%CVE-2009-0210—Buffer overflow in the MLF application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to execute arbitrary commands or causEPSS 3.7%CVE-2004-1838—Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the URL.EPSS 3.7%CVE-2005-2471—pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, EPSS 3.7%CVE-2016-2047—The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; OraclEPSS 3.7%CVE-2018-18869—EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/eEPSS 3.7%CVE-2024-12350MEDIUMJFinalCMS Template TemplateController.java update command injectionEPSS 3.7%CVE-2008-6748—Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a megEPSS 3.7%CVE-2020-27461—A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote code execution throuEPSS 3.7%CVE-2002-0984—The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitraryEPSS 3.7%CVE-2014-2717—Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow rEPSS 3.7%CVE-2021-37388—A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the wEPSS 3.7%CVE-2019-20218—selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.EPSS 3.7%CVE-2007-2250—admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.EPSS 3.7%CVE-2015-1474—Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android throuEPSS 3.7%CVE-2015-2736—The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird EPSS 3.7%CVE-2021-22667—BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unEPSS 3.7%CVE-2019-16915—An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitiEPSS 3.7%CVE-2015-2735—nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses uniEPSS 3.7%CVE-2010-3873—The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denEPSS 3.7%