Vulnerabilities in N/A
161,455 resultsCVE-2021-35042—Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a wEPSS 44.4%CVE-2007-3111—Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4,EPSS 44.4%CVE-2005-2678—Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via EPSS 44.4%CVE-2019-18952—SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote cEPSS 44.4%CVE-2023-31719—FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.EPSS 44.4%CVE-2019-13635—The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal.EPSS 44.4%CVE-2018-16299—The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.EPSS 44.4%CVE-2006-4602—Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP codEPSS 44.3%CVE-2020-5505—Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"applicEPSS 44.3%CVE-2005-3792—Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows rEPSS 44.3%CVE-2021-42887—In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.EPSS 44.3%CVE-2012-2611—The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeavEPSS 44.3%CVE-2013-3185—Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, anEPSS 44.3%CVE-2008-4726—Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a longEPSS 44.3%CVE-2008-1609—Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PEPSS 44.3%CVE-2008-1060—Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute EPSS 44.2%CVE-2016-2182—The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attaEPSS 44.2%CVE-2007-0024—Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 EPSS 44.2%CVE-2007-4474—Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dllEPSS 44.2%CVE-2023-24709HIGHAn issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters.EPSS 44.2%