Vulnerabilities in n/a
161,455 resultsCVE-2020-0452—In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code EPSS 3.1%CVE-2017-5357—regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid freEPSS 3.1%CVE-2016-5827—The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) viaEPSS 3.1%CVE-2010-4383—Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac REPSS 3.1%CVE-2013-4898—Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenEPSS 3.1%CVE-2005-2483—Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a EPSS 3.1%CVE-2007-5675—Stack-based buffer overflow in the DebugPrint function in MultiXTpm Application Server before 4.0.2d allows remote attackers to execute arbiEPSS 3.1%CVE-2006-0478—CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct requesEPSS 3.1%CVE-2014-2537—Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumptiEPSS 3.1%CVE-2008-6364—SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbEPSS 3.1%CVE-2016-3550—Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentialiEPSS 3.1%CVE-2020-11966—In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily.EPSS 3.1%CVE-2020-28136—An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via EPSS 3.1%CVE-2008-1327—Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a diEPSS 3.1%CVE-2019-11353—The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute uEPSS 3.1%CVE-2006-4226—MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to EPSS 3.1%CVE-2023-34927—Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerabiliEPSS 3.1%CVE-2007-4926—The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensiEPSS 3.1%CVE-2004-1881—SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commEPSS 3.1%CVE-2012-3292—The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from theEPSS 3.1%