Vulnerabilities in N/A

161,455 results
CVE-2014-5160—Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arEPSS 34.8%CVE-2004-2221—Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTEPSS 34.8%CVE-2008-2683—The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and EPSS 34.8%CVE-2006-4689—Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up EPSS 34.8%CVE-2024-1021MEDIUMRebuild HTTP Request readRawText server-side request forgeryEPSS 34.7%CVE-2023-49964—An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, EPSS 34.7%CVE-2001-1186—Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than tEPSS 34.7%CVE-2014-1770—Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaSEPSS 34.7%CVE-2013-5065HIGHNDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted applicEPSS 34.7%KEVCVE-2003-0345—Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibEPSS 34.6%CVE-2015-1648—ASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when the customErrors configuration is disabled,EPSS 34.6%CVE-2022-40871CRITICALDolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarrEPSS 34.6%CVE-2022-30075—In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due EPSS 34.6%CVE-2021-31324—The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code ExecutionEPSS 34.6%CVE-2017-5869—Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to uEPSS 34.6%CVE-2009-3676—The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to EPSS 34.6%CVE-2022-37661—SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.EPSS 34.6%CVE-2022-25766HIGHRemote Code Execution (RCE)EPSS 34.5%CVE-2008-0107—Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, EPSS 34.5%CVE-2023-39584—Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.EPSS 34.5%