Vulnerabilities in N/A
160,167 resultsCVE-2006-3280—Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains viEPSS 55.9%CVE-2008-3704—Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in MicEPSS 55.9%CVE-2007-0044—Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the broEPSS 55.9%CVE-2019-18371—An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary EPSS 55.9%CVE-2025-26319CRITICALFlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.EPSS 55.9%CVE-2019-7255—Linear eMerge E3-Series devices allow XSS.EPSS 55.8%CVE-2011-3494—WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary codeEPSS 55.8%CVE-2013-0025—Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that EPSS 55.8%CVE-2016-5387—The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untruEPSS 55.7%CVE-2019-8387—MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.EPSS 55.7%CVE-2005-2124—Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to EPSS 55.7%CVE-2021-21745—ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to EPSS 55.7%CVE-2022-25046—A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.EPSS 55.7%CVE-2013-3520—VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary EPSS 55.6%CVE-2014-7236—Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the deEPSS 55.6%CVE-2010-1423—Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and otEPSS 55.6%CVE-2007-4818—Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_EPSS 55.5%CVE-2021-46442—In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functionsEPSS 55.5%CVE-2022-37055CRITICALD-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,EPSS 55.5%KEVCVE-2019-14322—In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.EPSS 55.5%