Vulnerabilities in n/a

161,457 results
CVE-2009-2940—The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers tEPSS 2.7%CVE-2000-0397—The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a EPSS 2.7%CVE-2015-5381—Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inEPSS 2.7%CVE-2005-2021—Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the usEPSS 2.7%CVE-2016-6452—A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypasEPSS 2.7%CVE-2021-45608MEDIUMCertain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacEPSS 2.7%CVE-2018-10309—The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.EPSS 2.7%CVE-2005-2326—Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the EPSS 2.7%CVE-2008-5275—Multiple directory traversal vulnerabilities in the (a) "Unzip archive" and (b) "Upload files and archives" functionality in net2ftp 0.96 stEPSS 2.7%CVE-2017-11139—GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.EPSS 2.7%CVE-2002-1022—BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.EPSS 2.7%CVE-2022-27082—Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.EPSS 2.7%CVE-2022-30334—Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although thisEPSS 2.7%CVE-2023-43202HIGHD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler. This vuEPSS 2.7%CVE-2019-16714—In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack mEPSS 2.7%CVE-2023-43204HIGHD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function sub_2EF50. This vulnerability EPSS 2.7%CVE-2023-43207HIGHD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler. This vuEPSS 2.7%CVE-2013-1490—Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java securityEPSS 2.7%CVE-2009-0522—Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitEPSS 2.7%CVE-2007-1594—The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of serEPSS 2.7%