Vulnerabilities in N/A
159,958 resultsCVE-2019-10097—In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol,EPSS 52.9%CVE-2005-3589—Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USEREPSS 52.9%CVE-2001-0538—Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malEPSS 52.9%CVE-2009-3591—Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.EPSS 52.8%CVE-2017-18017—The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attacEPSS 52.8%CVE-2020-13382—openSIS through 7.4 has Incorrect Access Control.EPSS 52.8%CVE-2024-42010HIGHmod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in renEPSS 52.8%CVE-2023-36255—An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path EPSS 52.8%CVE-2014-1903—admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22EPSS 52.8%CVE-2007-4921—PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitraEPSS 52.8%CVE-2019-3964—In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter. This could allow an attacker toEPSS 52.7%CVE-2019-3963—In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient_id parameter. This could allow an attackeEPSS 52.7%CVE-2020-25079HIGHAn issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticaEPSS 52.7%KEVCVE-2008-2370—Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalizEPSS 52.7%CVE-2010-3585—Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integritEPSS 52.7%CVE-2012-5691—Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrarEPSS 52.7%CVE-2021-30119MEDIUMAuthenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6EPSS 52.7%CVE-2012-0897—Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a EPSS 52.7%CVE-2024-39931CRITICALGogs through 0.13.0 allows deletion of internal files.EPSS 52.7%CVE-2008-0108—Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works SuEPSS 52.6%