Vulnerabilities in N/A
161,272 resultsCVE-2019-12190—XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or fiEPSS 5.2%CVE-2010-4879—PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL EPSS 5.2%CVE-2009-4536—drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by pEPSS 5.2%CVE-2020-10611—Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary codEPSS 5.2%CVE-2011-0385—The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint SwitchEPSS 5.2%CVE-2016-5582—Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentialitEPSS 5.2%CVE-2012-5270—Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 EPSS 5.2%CVE-2007-6609—Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assistEPSS 5.2%CVE-2012-5272—Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 EPSS 5.2%CVE-2006-0697—Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vEPSS 5.2%CVE-2008-1866—admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated usersEPSS 5.2%CVE-2017-7689—A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.EPSS 5.2%CVE-2006-4852—SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy pEPSS 5.2%CVE-2022-31325—There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.EPSS 5.2%CVE-2015-2156—Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before EPSS 5.2%CVE-2005-1174—MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crasEPSS 5.2%CVE-2021-46067—In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.EPSS 5.2%CVE-2014-0138—The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) EPSS 5.2%CVE-2011-2704—Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors reEPSS 5.2%CVE-2013-6281—Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows EPSS 5.2%