Vulnerabilities in N/A
161,455 resultsCVE-2006-5336—Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impacEPSS 3.3%CVE-2008-7157—Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatEPSS 3.3%CVE-2007-5589—Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HEPSS 3.3%CVE-2008-2648—Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploadEPSS 3.3%CVE-2007-5386—Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requEPSS 3.3%CVE-2007-0143—Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a UREPSS 3.3%CVE-2007-1233—PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attackers to execute arbitrEPSS 3.3%CVE-2008-6814—Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allowsEPSS 3.3%CVE-2008-6581—login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie paEPSS 3.3%CVE-2001-0038—Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in thEPSS 3.3%CVE-2004-1923—Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_cliEPSS 3.3%CVE-2022-27406—FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_SizeEPSS 3.3%CVE-2008-6617—Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute arbitrary code by uplEPSS 3.3%CVE-2001-0452—BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed byEPSS 3.3%CVE-2008-5967—admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which alloEPSS 3.3%CVE-2006-2261—PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the pathEPSS 3.3%CVE-2022-36756—DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.EPSS 3.3%CVE-2007-4486—Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbitrary PHP code via a EPSS 3.3%CVE-2020-7116—The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authEPSS 3.3%CVE-2006-2361—PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allowEPSS 3.3%