Vulnerabilities in n/a
161,457 resultsCVE-2018-20364—LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.EPSS 2.6%CVE-2007-1932—Directory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote attackers to include and execute arbitrary local filesEPSS 2.6%CVE-2000-0477—Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that conEPSS 2.6%CVE-2009-3806—SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl paramEPSS 2.6%CVE-2019-8293—Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution.EPSS 2.6%CVE-2019-10708—S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter.EPSS 2.6%CVE-2019-15026—memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c.EPSS 2.6%CVE-2000-0642—The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attacEPSS 2.6%CVE-2010-2937—The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly processEPSS 2.6%CVE-2005-0186—Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable RemoteEPSS 2.6%CVE-2019-6114—An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwriEPSS 2.6%CVE-2014-1382—WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackerEPSS 2.6%CVE-2017-14349—An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaceEPSS 2.6%CVE-2021-27201—Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a bEPSS 2.6%CVE-2014-3780—Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass authentication EPSS 2.6%CVE-2019-10658—Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filenEPSS 2.6%CVE-2014-2008—SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitraEPSS 2.6%CVE-2012-3030—WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web roEPSS 2.6%CVE-2019-10660—Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the EPSS 2.6%CVE-2020-14396—An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.EPSS 2.6%