Vulnerabilities in n/a

161,132 results
CVE-2011-2506—setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of coEPSS 9.6%CVE-2003-0100—Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a largeEPSS 9.6%CVE-2015-5739—The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allows remote attackers tEPSS 9.6%CVE-2009-1586—Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary codeEPSS 9.6%CVE-2015-0315—Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before EPSS 9.6%CVE-2020-11110—Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JaEPSS 9.6%CVE-2007-5036—Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denEPSS 9.6%CVE-2024-35520HIGHNetgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter.EPSS 9.6%CVE-2002-1320—Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From hEPSS 9.6%CVE-2007-4155—Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbiEPSS 9.6%CVE-2019-3968—In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface whEPSS 9.6%CVE-2019-14749—An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets fuEPSS 9.6%CVE-2006-1371—Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to uEPSS 9.6%CVE-2015-5213—Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memoryEPSS 9.6%CVE-2005-1950—hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.EPSS 9.6%CVE-2018-4323—Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, SafarEPSS 9.6%CVE-2011-1068—Microsoft Windows Azure Software Development Kit (SDK) 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET apEPSS 9.6%CVE-2002-1220—BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subEPSS 9.6%CVE-2005-2330—Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequenceEPSS 9.6%CVE-2014-1972—Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remEPSS 9.6%