Vulnerabilities in n/a
161,246 resultsCVE-2006-1857—Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute aEPSS 6.9%CVE-2005-4799—Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to injEPSS 6.9%CVE-2004-0242—X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.EPSS 6.9%CVE-2020-5757—Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attaEPSS 6.9%CVE-2016-3739—The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurlEPSS 6.9%CVE-2018-18074—The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-httpEPSS 6.9%CVE-2010-3812—Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6EPSS 6.9%CVE-2019-3479—Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.EPSS 6.9%CVE-2004-2037—Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service (crash) and possiblyEPSS 6.9%CVE-2004-1854—Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet.EPSS 6.9%CVE-2003-0544—OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a dEPSS 6.9%CVE-2018-11236—stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpaEPSS 6.9%CVE-2018-11789—When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. ExampEPSS 6.9%CVE-2002-1828—Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length valEPSS 6.9%CVE-2010-1769—WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the EPSS 6.9%CVE-2005-0788—LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request.EPSS 6.9%CVE-2014-3629—XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connecEPSS 6.9%CVE-2013-2422—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlEPSS 6.9%CVE-2013-2420—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlierEPSS 6.9%CVE-2013-1557—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlierEPSS 6.9%