Vulnerabilities in N/A
161,395 resultsCVE-2007-2048—Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to readEPSS 3.8%CVE-2017-9124—The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereferenEPSS 3.8%CVE-2017-9123—The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memorEPSS 3.8%CVE-2006-1497—Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter.EPSS 3.8%CVE-2004-2617—Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the web root via a .. (dEPSS 3.8%CVE-2005-0583—Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via EPSS 3.8%CVE-2022-30708HIGHWebmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not createEPSS 3.8%CVE-2008-1665—Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, anEPSS 3.8%CVE-2018-1000019—OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenEPSS 3.8%CVE-2013-5910—Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity EPSS 3.8%CVE-2020-22345—/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters EPSS 3.8%CVE-2012-5897—The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properEPSS 3.8%CVE-2017-8834—The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocationEPSS 3.8%CVE-2014-0376—Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect iEPSS 3.8%CVE-2014-4561—The ultimate-weather plugin 1.0 for WordPress has XSSEPSS 3.8%CVE-2007-2496—The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via aEPSS 3.8%CVE-2014-4209—Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via EPSS 3.8%CVE-2008-4999—Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of deathEPSS 3.8%CVE-2014-4218—Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors relaEPSS 3.8%CVE-2006-2242—acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) characters to the USEREPSS 3.8%