Vulnerabilities in N/A
161,455 resultsCVE-2018-8766—joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/adEPSS 3.3%CVE-2019-5082—An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.EPSS 3.3%CVE-2018-19749—DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.EPSS 3.3%CVE-2008-4087—Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbiEPSS 3.3%CVE-2018-19752—DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.EPSS 3.3%CVE-2003-1219—Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackEPSS 3.3%CVE-2011-5011—Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack EPSS 3.3%CVE-2022-29316—Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancEPSS 3.3%CVE-2006-2781—Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause aEPSS 3.3%CVE-2010-3009—Unspecified vulnerability in HP System Management Homepage (SMH) for Linux 6.0 and 6.1 allows remote authenticated users to obtain sensitiveEPSS 3.3%CVE-2002-0797—Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.EPSS 3.3%CVE-2018-1000810—The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: IntegeEPSS 3.3%CVE-2008-0620—SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via EPSS 3.3%CVE-2008-3584—NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackEPSS 3.3%CVE-2017-15365—sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x befEPSS 3.3%CVE-2007-3500—Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.EPSS 3.3%CVE-2002-1118—TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of serviceEPSS 3.3%CVE-2009-2055MEDIUMCisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalEPSS 3.3%KEVCVE-2007-4368—SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitEPSS 3.3%CVE-2012-0915—Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leadingEPSS 3.3%