Vulnerabilities in N/A
161,400 resultsCVE-2020-14413—NeDi 1.9C is vulnerable to XSS because of an incorrect implementation of sanitize() in inc/libmisc.php. This function attempts to escape theEPSS 3.5%CVE-2020-13092—scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() fuEPSS 3.5%CVE-2022-27271—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.5%CVE-2022-27270—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.5%CVE-2022-27272—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.5%CVE-2022-27273—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.5%CVE-2022-27275—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.5%CVE-2022-27274—InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabilityEPSS 3.5%CVE-2009-4308—The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attacEPSS 3.5%CVE-2016-1499—ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information fEPSS 3.5%CVE-2017-8114—Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.EPSS 3.5%CVE-2002-0837—wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site sEPSS 3.5%CVE-2010-0391—Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary cEPSS 3.5%CVE-2014-8334—The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands viEPSS 3.5%CVE-2004-1698—The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of service (application EPSS 3.5%CVE-2021-45887—An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for uploaded ZIP files, aEPSS 3.5%CVE-2016-0728—The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certainEPSS 3.5%CVE-1999-0973—Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verEPSS 3.5%CVE-1999-0943—Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.EPSS 3.5%CVE-2006-6800—PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHEPSS 3.5%