Vulnerabilities in N/A
161,289 resultsCVE-2019-19634—class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, EPSS 4.2%CVE-2019-16255—Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) toEPSS 4.2%CVE-2009-2177—code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory traveEPSS 4.2%CVE-2015-2218—Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio PlaEPSS 4.2%CVE-2021-20083—Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object 2.2.3 allows a malicEPSS 4.2%CVE-2006-3793—PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP EPSS 4.2%CVE-1999-0372—The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.EPSS 4.2%CVE-2002-2417—acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to EPSS 4.2%CVE-2010-3270—Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticaEPSS 4.2%CVE-2017-3051—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption EPSS 4.2%CVE-2017-3050—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption EPSS 4.2%CVE-2010-0552—Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary cEPSS 4.2%CVE-2005-4216—The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service (aEPSS 4.2%CVE-2018-18461—The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary EPSS 4.2%CVE-2015-7179—The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x befoEPSS 4.2%CVE-2018-19977—A command injection (missing input validation, escaping) in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3EPSS 4.2%CVE-2002-0908—Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary fileEPSS 4.2%CVE-2008-4482—The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via EPSS 4.2%CVE-2010-4232—The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102EPSS 4.2%CVE-2004-0467—Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packeEPSS 4.2%