Vulnerabilities in N/A
161,400 resultsCVE-2013-4759—Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allowEPSS 3.5%CVE-2004-1885—Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify cEPSS 3.5%CVE-2006-1994—PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFOEPSS 3.5%CVE-2002-2091—Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the usernamEPSS 3.5%CVE-2003-1283—KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could allow remote attackers EPSS 3.5%CVE-2006-5782—radexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication before executing commands in the installation EPSS 3.5%CVE-2009-1572—The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing AEPSS 3.5%CVE-2017-14840—TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.EPSS 3.5%CVE-2017-14839—TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.EPSS 3.5%CVE-2017-14838—TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.EPSS 3.5%CVE-2019-18364—In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.EPSS 3.5%CVE-2020-26145—An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent)EPSS 3.5%CVE-2015-2190—epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remoteEPSS 3.5%CVE-2016-3945—Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -bEPSS 3.5%CVE-2010-0714—Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus WorkplaEPSS 3.5%CVE-2009-3275—Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allEPSS 3.5%CVE-2015-6473—WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.EPSS 3.5%CVE-2011-3517—Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability viEPSS 3.5%CVE-2007-2268—Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary fiEPSS 3.5%CVE-2014-0248—org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JEPSS 3.5%