Vulnerabilities in n/a
161,242 resultsCVE-2017-10688—In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will EPSS 7.4%CVE-2020-9043—The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key.EPSS 7.4%CVE-2005-0435—awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawEPSS 7.4%CVE-2002-0535—Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMGEPSS 7.4%CVE-2017-5359—EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI.EPSS 7.4%CVE-2014-8802—The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allowsEPSS 7.4%CVE-2004-1008—Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEEPSS 7.4%CVE-2004-1365—Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arEPSS 7.4%CVE-2001-0879—Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.EPSS 7.4%CVE-2016-7429—NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to causEPSS 7.4%CVE-2012-2226—Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information oEPSS 7.4%CVE-2018-4919—Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to aEPSS 7.4%CVE-2017-14705—DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted intoEPSS 7.4%CVE-2006-5495—Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP codeEPSS 7.4%CVE-2014-5300—Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, EPSS 7.4%CVE-2020-13994—An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket becEPSS 7.4%CVE-2006-2531—Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusteEPSS 7.4%CVE-2015-3120—Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIREPSS 7.4%CVE-2008-1054—Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlEPSS 7.4%CVE-2011-5062—The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does notEPSS 7.4%