Vulnerabilities in n/a

161,457 results
CVE-2019-9106—The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or inclEPSS 2.8%CVE-2020-15713—rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script usEPSS 2.8%CVE-2020-6019—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBaEPSS 2.8%CVE-2014-0475—Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass FEPSS 2.8%CVE-2006-3699—Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 and 9.2.0.6 has unknown impact and attack vectors, aka OracEPSS 2.8%CVE-2020-15714—rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php scriEPSS 2.8%CVE-2004-0033—admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.EPSS 2.8%CVE-2008-1367—gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and iEPSS 2.8%CVE-2019-19458—SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.EPSS 2.8%CVE-2012-3660—WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptiEPSS 2.8%CVE-2017-7943—The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted filEPSS 2.8%CVE-2023-42471—The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intenEPSS 2.8%CVE-2013-7402—Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (crash) via a crafted EPSS 2.8%CVE-2015-6465—The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial oEPSS 2.8%CVE-2006-2074—Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to tEPSS 2.8%CVE-2002-0095—The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which coulEPSS 2.8%CVE-2014-1565—The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31EPSS 2.8%CVE-2016-3483—Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remotEPSS 2.8%CVE-2019-12838—SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.EPSS 2.8%CVE-2002-1007—Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter EPSS 2.8%