Vulnerabilities in N/A
161,455 resultsCVE-2002-1248—Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of serviceEPSS 3.2%CVE-2002-0922—CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) defaulEPSS 3.2%CVE-2018-16518—A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.EPSS 3.2%CVE-2019-10633—An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated aEPSS 3.2%CVE-2004-1866—nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, which triggers a null dEPSS 3.2%CVE-2004-1109—The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and EPSS 3.2%CVE-2021-26601—ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.EPSS 3.2%CVE-2015-0855—The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters EPSS 3.2%CVE-2016-1000129—Reflected XSS in wordpress plugin defa-online-image-protector v3.3EPSS 3.2%CVE-2002-1752—csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is procesEPSS 3.2%CVE-2012-6505—Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to injecEPSS 3.2%CVE-2014-5216—Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbiEPSS 3.2%CVE-2014-7200—Cross-site scripting (XSS) vulnerability in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlieEPSS 3.2%CVE-2015-2828—CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obEPSS 3.2%CVE-2014-9412—Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary EPSS 3.2%CVE-2013-4484—Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET requeEPSS 3.2%CVE-2010-3087—LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly executEPSS 3.2%CVE-2005-4319—Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via EPSS 3.2%CVE-2004-0960—FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) EPSS 3.2%CVE-2013-6920—Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote EPSS 3.2%