Vulnerabilities in n/a
161,457 resultsCVE-2019-17177—libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the EPSS 2.7%CVE-2015-6319—SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL cEPSS 2.7%CVE-2017-14127—Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrarEPSS 2.7%CVE-2005-1580—users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execuEPSS 2.7%CVE-2005-3765—Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers toEPSS 2.7%CVE-2006-6338—Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to upload andEPSS 2.7%CVE-2019-9904—An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lEPSS 2.7%CVE-2008-2350—Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. EPSS 2.7%CVE-2017-1000421—Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code executionEPSS 2.7%CVE-2013-4447—Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal alEPSS 2.7%CVE-2016-1643—The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome befEPSS 2.7%CVE-2016-1927—The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies oEPSS 2.7%CVE-2006-3027—Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via EPSS 2.7%CVE-2019-7425—XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" fEPSS 2.7%CVE-2008-2215—Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary filEPSS 2.7%CVE-2019-11888—Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers EPSS 2.7%CVE-2020-35269—Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like adding – deletingEPSS 2.7%CVE-2019-11601CRITICALPath traversal in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway SoftwareEPSS 2.7%CVE-2008-5861—Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via directory traversal seEPSS 2.7%CVE-2005-0188—Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string EPSS 2.7%