Vulnerabilities in N/A
161,456 resultsCVE-2009-4082—PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attEPSS 3.0%CVE-2014-0214—login/token.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 creates a MoodleMobile web-serviceEPSS 3.0%CVE-2017-6704—A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to pEPSS 3.0%CVE-2014-2504—EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users tEPSS 3.0%CVE-2007-5341—Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.EPSS 3.0%CVE-2020-8206—An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bEPSS 3.0%CVE-2005-3220—Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection viEPSS 3.0%CVE-2013-6792—Google Android prior to 4.4 has an APK Signature Security Bypass VulnerabilityEPSS 3.0%CVE-2017-5936—OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which alloEPSS 3.0%CVE-2019-19790—Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .EPSS 3.0%CVE-2019-10854—Computrols CBAS 18.0.0 allows Authenticated Command Injection.EPSS 3.0%CVE-2014-4003—The System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system.EPSS 3.0%CVE-2019-9580—In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" orEPSS 3.0%CVE-2021-43042—An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This wasEPSS 3.0%CVE-2010-1114—Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP coEPSS 3.0%CVE-2009-2163—Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to injecEPSS 3.0%CVE-2006-1322—Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service (ABEND) via an MDTM command that uses a long path for theEPSS 3.0%CVE-2008-5920—The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is EPSS 3.0%CVE-2015-4906—Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors relEPSS 3.0%CVE-2018-8814—Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requestEPSS 3.0%