Vulnerabilities in N/A

161,457 results
CVE-2017-10793—The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, confEPSS 2.8%CVE-2012-3437—The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper variable type for the allocation sizEPSS 2.8%CVE-2008-5441—Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availabilEPSS 2.8%CVE-2002-1345—Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files EPSS 2.8%CVE-2008-5442—Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availabilEPSS 2.8%CVE-2021-31530—Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.EPSS 2.8%CVE-2019-9220—An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allowsEPSS 2.8%CVE-2018-13318—System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the EPSS 2.8%CVE-2015-2690—Multiple cross-site scripting (XSS) vulnerabilities in views/add-license-form.php in the Digium Addons module (digiumaddoninstaller) before EPSS 2.8%CVE-2002-1070—Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the EPSS 2.8%CVE-2018-13320—System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands vEPSS 2.8%CVE-2006-5770—Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) BloEPSS 2.8%CVE-2019-9546—SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.EPSS 2.8%CVE-2007-1485—Buffer overflow in the set_umask function in QFTP in LIBFtp 3.1-1 allows local users to execute arbitrary code via a long -m argument. NOTE:EPSS 2.8%CVE-2007-3240—Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers to inject arbitrary wEPSS 2.8%CVE-2007-6235—A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malfoEPSS 2.8%CVE-2021-38697—SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extensiEPSS 2.8%CVE-2016-0699—Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remEPSS 2.8%CVE-2015-8037—Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remoteEPSS 2.8%CVE-2012-5621—lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connEPSS 2.8%