Vulnerabilities in n/a

161,143 results
CVE-2010-2482—LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to cause a denial of seEPSS 8.8%CVE-2022-25547—Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to causEPSS 8.8%CVE-2007-3487—Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attEPSS 8.8%CVE-2006-5925—Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacEPSS 8.8%CVE-2014-0372—Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0EPSS 8.8%CVE-2009-5029—Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) EPSS 8.8%CVE-2021-28378LOWGitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.EPSS 8.8%CVE-2019-11223—An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrarEPSS 8.8%CVE-2012-4878—Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files EPSS 8.8%CVE-2015-8258—AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving OpeEPSS 8.8%CVE-2007-2983—Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remoEPSS 8.8%CVE-2015-0348—Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 EPSS 8.8%CVE-2013-3539—Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DEPSS 8.8%CVE-2014-4643—Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (applEPSS 8.8%CVE-2006-2665—PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PEPSS 8.8%CVE-2015-3184—mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anEPSS 8.8%CVE-2011-3642—Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 andEPSS 8.8%CVE-2013-3239—phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to executeEPSS 8.8%CVE-2015-5195—ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statiEPSS 8.8%CVE-2020-20300—SQL injection vulnerability in the wp_where function in WeiPHP 5.0.EPSS 8.8%