Vulnerabilities in N/A
159,958 resultsCVE-2019-17418—An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameEPSS 49.3%CVE-2008-4114—srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 alEPSS 49.3%CVE-2022-23833—An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to mEPSS 49.2%CVE-2020-6010—LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL InjectionEPSS 49.2%CVE-2007-0069—Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of serEPSS 49.2%CVE-2022-37109CRITICALpatrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to EPSS 49.2%CVE-2006-2685—PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allowEPSS 49.2%CVE-2021-22017MEDIUMRhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with netEPSS 49.2%KEVCVE-2008-1311—The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang)EPSS 49.2%CVE-2022-35650—The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks rEPSS 49.1%CVE-2010-0241—The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properlEPSS 49.1%CVE-2014-4404HIGHHeap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privilEPSS 49.0%KEVCVE-2019-12527—An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global bufferEPSS 49.0%CVE-2006-1315—The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote EPSS 49.0%CVE-2004-0200—Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remoteEPSS 49.0%CVE-2007-4776—Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary codeEPSS 49.0%CVE-2018-18820—A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any maliciouEPSS 48.9%CVE-2019-12992—Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).EPSS 48.9%CVE-2005-3388—Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to injecEPSS 48.9%CVE-2011-0514—The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with aEPSS 48.9%