Vulnerabilities in N/A
161,401 resultsCVE-2019-13614—CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to aEPSS 3.4%CVE-2019-13613—CMD_FTEST_CONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 (EU) aEPSS 3.4%CVE-2008-7315—UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.EPSS 3.4%CVE-2005-1881—upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attacEPSS 3.4%CVE-2011-3859—Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web scriEPSS 3.4%CVE-2011-3855—Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web scrEPSS 3.4%CVE-2021-28042—Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO ConneEPSS 3.4%CVE-2014-0469—Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code viEPSS 3.4%CVE-2014-6519—Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknowEPSS 3.4%CVE-2023-28458MEDIUMpretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the stEPSS 3.4%CVE-2010-1897—The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, WindoEPSS 3.4%CVE-2014-9241—Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attackers to inject arbitrEPSS 3.4%CVE-2008-3509—LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, whicEPSS 3.4%CVE-2006-3972—Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers tEPSS 3.4%CVE-2017-13029—The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().EPSS 3.4%CVE-2017-13052—The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().EPSS 3.4%CVE-2017-13030—The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.EPSS 3.4%CVE-2017-13039—The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.EPSS 3.4%CVE-2017-13035CRITICALThe ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().EPSS 3.4%CVE-2016-5020—F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration EPSS 3.4%