Vulnerabilities in n/a
161,455 resultsCVE-2015-5186—Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.EPSS 3.1%CVE-2007-1059—PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via EPSS 3.1%CVE-2017-12930—SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web iEPSS 3.1%CVE-2004-0745—LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.EPSS 3.1%CVE-2011-0015—Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allowEPSS 3.1%CVE-2009-0661—Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command coEPSS 3.1%CVE-2023-46382—LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for EPSS 3.1%CVE-2023-46380HIGHLOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change reEPSS 3.1%CVE-2006-5543—PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when register_globals is enabEPSS 3.1%CVE-2000-0953—Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.EPSS 3.1%CVE-2020-24987—Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect autEPSS 3.1%CVE-2008-4622—The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative aEPSS 3.1%CVE-2019-14318—Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to meaEPSS 3.1%CVE-2001-0049—WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests.EPSS 3.1%CVE-2004-2367—The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of service (crash) via a EPSS 3.1%CVE-2006-1017—The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functiEPSS 3.1%CVE-2006-6330—index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter.EPSS 3.1%CVE-2021-37599—The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remotEPSS 3.1%CVE-2016-9107—The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via EPSS 3.1%CVE-1999-0817—Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certainEPSS 3.1%