Vulnerabilities in n/a
161,148 resultsCVE-2009-2688—Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of servicEPSS 8.6%CVE-2012-0788—The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a EPSS 8.6%CVE-2005-0094—Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher serEPSS 8.6%CVE-2008-0418—Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "fEPSS 8.6%CVE-2018-7184—ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denEPSS 8.6%CVE-2012-6708—jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors fromEPSS 8.6%CVE-2008-5334—PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code viaEPSS 8.6%CVE-2009-2620—src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allowsEPSS 8.6%CVE-2018-4944—Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to aEPSS 8.6%CVE-2016-1000112—Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress pluginEPSS 8.6%CVE-2005-3713—Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a craEPSS 8.6%CVE-2009-3606—Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allowEPSS 8.6%CVE-2022-46604HIGHAn issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a craftEPSS 8.6%CVE-2012-5278—Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 EPSS 8.6%CVE-2025-51088MEDIUMTenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leEPSS 8.6%CVE-2025-51085MEDIUMTenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument `timeZone` andEPSS 8.6%CVE-2021-39510—An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function EPSS 8.6%CVE-2019-13917—Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansionEPSS 8.6%CVE-2004-0045—Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arEPSS 8.6%CVE-2018-20020—LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client EPSS 8.6%