Vulnerabilities in n/a
161,242 resultsCVE-2004-0030—PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 alEPSS 7.3%CVE-2009-1182—Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other proEPSS 7.3%CVE-2019-13237—In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access serveEPSS 7.3%CVE-2008-5280—The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote attackers to cause a denial of service (NULLEPSS 7.3%CVE-2010-2809—The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows uEPSS 7.3%CVE-2004-1554—PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modiEPSS 7.3%CVE-2008-1278—The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a deniEPSS 7.3%CVE-2020-25097—An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to performEPSS 7.3%CVE-2000-0766—Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GEPSS 7.3%CVE-2000-0400—The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attaEPSS 7.3%CVE-2008-1218—Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackEPSS 7.3%CVE-2015-5730—The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not use a constant-time cEPSS 7.3%CVE-2004-1390—Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument tEPSS 7.3%CVE-2005-3710—Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified imageEPSS 7.3%CVE-2011-4800—Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, EPSS 7.3%CVE-2001-1195—Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote EPSS 7.3%CVE-2016-5770—Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 aEPSS 7.3%CVE-2007-3151—rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cause a denial of servicEPSS 7.3%CVE-2019-16394—SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail addEPSS 7.3%CVE-2015-3153—The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which mightEPSS 7.3%