Vulnerabilities in N/A
159,958 resultsCVE-2013-0810HIGHMicrosoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute EPSS 59.9%CVE-2024-31621HIGHAn issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 cEPSS 59.9%CVE-2014-100002—Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a .EPSS 59.9%CVE-2013-3763—Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated usEPSS 59.8%CVE-2019-12265—Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerabEPSS 59.8%CVE-2005-0053—Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop VulnerEPSS 59.8%CVE-2014-4148HIGHwin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7EPSS 59.8%KEVCVE-2007-6019—Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with aEPSS 59.8%CVE-2019-5485—NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repEPSS 59.8%CVE-2021-46417—Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin FuelinEPSS 59.8%CVE-2011-4404—The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1EPSS 59.7%CVE-2011-2595—Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id paramEPSS 59.7%CVE-2014-4725—The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and executeEPSS 59.7%CVE-2008-5159—Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote atEPSS 59.7%CVE-2021-27030—A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’sEPSS 59.6%CVE-2014-8424—ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.EPSS 59.6%CVE-2011-4317—The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 11792EPSS 59.6%CVE-2023-0587CRITICALA file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT mesEPSS 59.6%CVE-2022-29273—pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.EPSS 59.6%CVE-2013-5880—Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.EPSS 59.6%