Vulnerabilities in n/a

161,454 results
CVE-2006-6232—PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a UEPSS 3.3%CVE-2008-5023—Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechEPSS 3.3%CVE-2015-2269—Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.EPSS 3.3%CVE-2015-8035—The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to EPSS 3.3%CVE-2012-5526—CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackerEPSS 3.3%CVE-2022-25809—Improper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices allows arbitrary voice command execution on thesEPSS 3.3%CVE-2011-1208—IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4)EPSS 3.3%CVE-2013-4271—The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allowEPSS 3.3%CVE-2011-5208—Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary fileEPSS 3.3%CVE-2012-0841—libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-depenEPSS 3.3%CVE-2015-6171—The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 GoEPSS 3.3%CVE-2005-3518—SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_seaEPSS 3.3%CVE-2019-16734—Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execuEPSS 3.3%CVE-2016-5259—Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 alEPSS 3.3%CVE-2019-17544—libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ charEPSS 3.3%CVE-2016-1896—Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.0EPSS 3.3%CVE-2001-0285—Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a loEPSS 3.3%CVE-2016-5258—Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attacEPSS 3.3%CVE-2020-25672—A memory leak vulnerability was found in Linux kernel in llcp_sock_connectEPSS 3.3%CVE-2005-1692—Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code EPSS 3.3%