Vulnerabilities in n/a

161,455 results
CVE-2020-26098—cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485).EPSS 3.0%CVE-2013-2205—The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, which allows remote attaEPSS 3.0%CVE-2005-2030—Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the pEPSS 3.0%CVE-2007-4361—NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial EPSS 3.0%CVE-2020-7465—The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 CausEPSS 3.0%CVE-2020-26890—Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, alEPSS 3.0%CVE-2019-9125—An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability EPSS 3.0%CVE-2001-0851—Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.EPSS 3.0%CVE-2005-1527—Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitEPSS 3.0%CVE-2013-3383—The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-5EPSS 3.0%CVE-2007-4050—Unspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition allows remote attackers to access system-level windoEPSS 3.0%CVE-2016-1254—Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.EPSS 3.0%CVE-2023-1112MEDIUMDrag and Drop Multiple File Upload Contact Form 7 admin-ajax.php path traversalEPSS 3.0%CVE-2005-2548—vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) EPSS 3.0%CVE-2008-5025—Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to EPSS 3.0%CVE-2019-20916—The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition hEPSS 3.0%CVE-2022-28584—It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) rouEPSS 3.0%CVE-2012-1467—Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authEPSS 3.0%CVE-2022-28575—It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024)EPSS 3.0%CVE-2006-5283—PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the mEPSS 3.0%