Vulnerabilities in N/A
161,399 resultsCVE-2004-0680—Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password EPSS 3.6%CVE-2002-1691—Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain EPSS 3.6%CVE-2002-2129—Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arEPSS 3.6%CVE-2005-1289—index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and pEPSS 3.6%CVE-2004-2310—Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or EPSS 3.6%CVE-2018-9148—Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers EPSS 3.6%CVE-2004-2004—The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges vEPSS 3.6%CVE-2015-1026—Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to injeEPSS 3.6%CVE-2009-0186—Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code viEPSS 3.6%CVE-2021-23362MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 3.6%CVE-2018-6639—An out-of-bounds write (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. A size used by memmove is read from theEPSS 3.6%CVE-2014-2328—lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharEPSS 3.6%CVE-2005-2919—libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSEPSS 3.6%CVE-2019-5083CRITICALAn exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 librEPSS 3.6%CVE-2006-4330—Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of serviceEPSS 3.6%CVE-2005-2958—Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arEPSS 3.6%CVE-2020-12054—The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themeEPSS 3.6%CVE-2014-2420—Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unEPSS 3.6%CVE-2014-2401—Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to aEPSS 3.6%CVE-2020-24588—The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the EPSS 3.6%