Vulnerabilities in N/A
161,292 resultsCVE-2014-0121—The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parametEPSS 4.0%CVE-2014-2025—Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 090EPSS 4.0%CVE-2020-7795HIGHCommand InjectionEPSS 4.0%CVE-2007-1972—PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote aEPSS 4.0%CVE-2019-12146—A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the abilEPSS 4.0%CVE-2016-6633—An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigger a remote code execution attack against certain PHP installations thEPSS 4.0%CVE-2006-1819—Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to includEPSS 4.0%CVE-2008-0193—Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remotEPSS 4.0%CVE-2007-2506—WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial EPSS 4.0%CVE-2005-0384—Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) viaEPSS 4.0%CVE-2018-6526—view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filtEPSS 4.0%CVE-2016-10181—An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg requests.EPSS 4.0%CVE-2006-1455—QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service (crash and connection inEPSS 4.0%CVE-2022-28948—An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.EPSS 4.0%CVE-2016-4029—WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote atEPSS 4.0%CVE-2018-9113—Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection EPSS 4.0%CVE-2018-8974—Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection EPSS 4.0%CVE-2006-2254—Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application crash) via a username witEPSS 4.0%CVE-2022-21828—A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unsEPSS 4.0%CVE-2005-0543—Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strEPSS 4.0%