Vulnerabilities in N/A
161,455 resultsCVE-2020-7055—An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attackEPSS 3.1%CVE-2022-0225—A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new groEPSS 3.1%CVE-2003-0121—Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version heaEPSS 3.1%CVE-2017-11740—In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be execEPSS 3.1%CVE-2005-1061—The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in theEPSS 3.1%CVE-2020-28277—Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remoteEPSS 3.1%CVE-2009-4776—Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosmEPSS 3.1%CVE-2006-1922—PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP cEPSS 3.1%CVE-2020-28278—Prototype pollution vulnerability in 'shvl' versions 1.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remEPSS 3.1%CVE-2008-1667—The Probe Builder Service (aka PBOVISServer.exe) in European Performance Systems (EPS) Probe Builder 2.2 before A.02.20.901, as used in HP OEPSS 3.1%CVE-2006-5790—Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and EPSS 3.1%CVE-2020-28276—Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to reEPSS 3.1%CVE-2020-28280—Prototype pollution vulnerability in 'predefine' versions 0.0.0 through 0.1.2 allows an attacker to cause a denial of service and may lead tEPSS 3.1%CVE-2021-40883—A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.EPSS 3.1%CVE-2018-9172—The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.EPSS 3.1%CVE-2009-4688—Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to injecEPSS 3.1%CVE-2017-12951—The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stacEPSS 3.1%CVE-2013-2341—Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658250-B21, and 658247-EPSS 3.1%CVE-2005-1998—Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the laEPSS 3.1%CVE-2018-1999010—FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol thatEPSS 3.1%