Vulnerabilities in n/a
161,399 resultsCVE-2014-1923—Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before EPSS 3.5%CVE-2021-33196—In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReaEPSS 3.5%CVE-2016-7924—The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().EPSS 3.5%CVE-2012-3017—Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and servEPSS 3.5%CVE-2015-2366—win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 GoEPSS 3.5%CVE-2016-7939—The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.EPSS 3.5%CVE-2014-2257—Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transitiEPSS 3.5%CVE-2006-6169—Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allEPSS 3.5%CVE-2005-2366—Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop)EPSS 3.5%CVE-2016-7530—The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) EPSS 3.5%CVE-2001-0513—Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, whEPSS 3.5%CVE-2017-12985CRITICALThe IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().EPSS 3.5%CVE-2017-13010CRITICALThe BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().EPSS 3.5%CVE-2018-20795—tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through thEPSS 3.5%CVE-2018-20792—tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through theEPSS 3.5%CVE-2019-9743—An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI componentEPSS 3.5%CVE-2018-13982—Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template codeEPSS 3.5%CVE-2009-1364—Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (aEPSS 3.5%CVE-2021-41817—Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions EPSS 3.5%CVE-2022-24312—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing fileEPSS 3.5%