Vulnerabilities in n/a

161,398 results
CVE-2018-16429—GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().EPSS 3.5%CVE-2019-17673—WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.EPSS 3.5%CVE-2019-14232HIGHAn issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's charsEPSS 3.5%CVE-2015-2512—The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, WiEPSS 3.5%CVE-2017-14405—The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameterEPSS 3.5%CVE-2016-0448—Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 EPSS 3.5%CVE-2020-9004—A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue reqEPSS 3.5%CVE-2006-3464—TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger aEPSS 3.5%CVE-2001-0012—BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.EPSS 3.5%CVE-2009-2229—Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dotEPSS 3.5%CVE-2013-3384—The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-5EPSS 3.5%CVE-2011-3865—Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary EPSS 3.5%CVE-2011-3858—Cross-site scripting (XSS) vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers to inject arbitrary weEPSS 3.5%CVE-2015-7541—The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-depenEPSS 3.5%CVE-2007-4956—Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter tEPSS 3.5%CVE-2007-1659—Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and posEPSS 3.5%CVE-2007-1513—PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_globals is enabled, aEPSS 3.5%CVE-2008-0246—admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackeEPSS 3.5%CVE-2011-3861—Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitEPSS 3.5%CVE-2001-1424—Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allowEPSS 3.5%