Vulnerabilities in N/A
161,395 resultsCVE-2011-5036—Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trEPSS 3.9%CVE-2014-5428—Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and DEPSS 3.9%CVE-2009-4100—Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to EPSS 3.9%CVE-2014-2278—Unrestricted file upload vulnerability in op/op.AddFile2.php in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allows remote attackers toEPSS 3.9%CVE-2002-2113—search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.EPSS 3.9%CVE-2001-1241—Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to exEPSS 3.9%CVE-2002-1445—Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-eEPSS 3.9%CVE-2013-1386—Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unsEPSS 3.9%CVE-2001-0090—The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allowEPSS 3.9%CVE-2013-1384—Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unsEPSS 3.9%CVE-2020-27255—A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticateEPSS 3.9%CVE-2006-4846—Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAEPSS 3.9%CVE-2023-31473MEDIUMAn issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on EPSS 3.9%CVE-2016-7834—SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SEPSS 3.9%CVE-2019-11607—doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A remote unauthenticated attacker can exploitEPSS 3.9%CVE-2019-11611—doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploiEPSS 3.9%CVE-2019-11610—doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can expEPSS 3.9%CVE-2019-11606—doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploiEPSS 3.9%CVE-2009-3079—Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript EPSS 3.9%CVE-2012-4191—The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16EPSS 3.9%