Vulnerabilities in n/a
161,398 resultsCVE-2014-4351—Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (applEPSS 3.6%CVE-2004-1659—Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, JourEPSS 3.6%CVE-2002-0399—Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary fEPSS 3.6%CVE-2018-19789—An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, andEPSS 3.6%CVE-2020-28493MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 3.6%CVE-2020-10969HIGHFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEPSS 3.6%CVE-2019-9195—util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP arEPSS 3.6%CVE-2016-3518—Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related toEPSS 3.6%CVE-2004-0916—Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containinEPSS 3.6%CVE-2021-39501—EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.EPSS 3.6%CVE-2014-8567—The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logoutEPSS 3.6%CVE-2020-12663—Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.EPSS 3.6%CVE-2001-1114—book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.EPSS 3.6%CVE-2007-0539—The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) EPSS 3.6%CVE-2004-1207—The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second EncountEPSS 3.6%CVE-2006-4910—The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attaEPSS 3.6%CVE-2020-7623—jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.EPSS 3.6%CVE-2016-9180—perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. ExternaEPSS 3.6%CVE-2015-5779—QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption aEPSS 3.6%CVE-2013-2175—HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence counEPSS 3.6%