Vulnerabilities in N/A
161,457 resultsCVE-2017-12061—An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MaEPSS 2.9%CVE-2024-32281HIGHTenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter.EPSS 2.9%CVE-2023-32751MEDIUMPydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the AmazonEPSS 2.9%CVE-2021-46005—Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter.EPSS 2.9%CVE-2014-9353—NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecifEPSS 2.9%CVE-2020-11476—Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.EPSS 2.9%CVE-2024-53939HIGHAn issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The /cgi-bin/luci/admin/opsw/EPSS 2.9%CVE-2022-23047—Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site TEPSS 2.9%CVE-2007-3545—Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service (application crash) or executEPSS 2.9%CVE-2008-3415—Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and exeEPSS 2.9%CVE-2015-3723—CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via EPSS 2.9%CVE-2012-1838—The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleEPSS 2.9%CVE-2015-1822—chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remoteEPSS 2.9%CVE-2008-2863—Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitraryEPSS 2.9%CVE-2015-7326—XML External Entity (XXE) vulnerability in Milton Webdav before 2.7.0.3.EPSS 2.9%CVE-2014-2513—EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorizatiEPSS 2.9%CVE-2015-1401—Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.EPSS 2.9%CVE-2020-14968—An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signaturEPSS 2.9%CVE-2017-10966—An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface aEPSS 2.9%CVE-2020-8637—A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_idEPSS 2.9%