Vulnerabilities in n/a
161,243 resultsCVE-2015-8833—Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin beforEPSS 7.0%CVE-2019-16679—Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.EPSS 7.0%CVE-2006-1827—Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length valueEPSS 7.0%CVE-2006-5928—Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PHP code via a URL in EPSS 7.0%CVE-2007-4329—Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the conEPSS 7.0%CVE-2007-0643—Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service (application craEPSS 7.0%CVE-2021-23369MEDIUMRemote Code Execution (RCE)EPSS 7.0%CVE-1999-0068—CGI PHP mylog script allows an attacker to read any file on the target server.EPSS 7.0%CVE-2008-4428—Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackEPSS 7.0%CVE-2007-1257—The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via ceEPSS 7.0%CVE-2018-9107—CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 fEPSS 7.0%CVE-2022-26651—An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequaEPSS 7.0%CVE-2009-0967—The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large nEPSS 7.0%CVE-2016-3627HIGHThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to EPSS 7.0%CVE-2021-44735—Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.EPSS 7.0%CVE-2014-1947—Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause EPSS 7.0%CVE-2002-1009—Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrarEPSS 7.0%CVE-2001-0626—O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL requeEPSS 7.0%CVE-2002-0413—Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose UREPSS 7.0%CVE-2001-0839—ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers toEPSS 7.0%