Vulnerabilities in n/a
161,455 resultsCVE-2018-18800—The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=rooms&q=[SQL], or adEPSS 3.2%CVE-2001-0564—APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial ofEPSS 3.2%CVE-2018-18923—AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, category_id and description in actioEPSS 3.2%CVE-2000-0428—Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a lEPSS 3.2%CVE-2007-1822—Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spEPSS 3.2%CVE-2012-0818—RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML externaEPSS 3.2%CVE-2018-17383—SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.EPSS 3.2%CVE-2002-1023—BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.EPSS 3.2%CVE-2018-17382—SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.EPSS 3.2%CVE-2019-11816—Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to esEPSS 3.2%CVE-2018-14048—An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling forEPSS 3.2%CVE-2014-0437—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allowEPSS 3.2%CVE-2014-8384—The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modiEPSS 3.2%CVE-2013-2596HIGHInteger overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of AEPSS 3.2%KEVCVE-2016-8602—The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash)EPSS 3.2%CVE-2019-15819—The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication.EPSS 3.2%CVE-2018-11189—Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6).EPSS 3.2%CVE-2015-7287—CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations,EPSS 3.2%CVE-2000-0800—String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gaiEPSS 3.2%CVE-2010-4670—The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with sEPSS 3.2%