Vulnerabilities in N/A
161,457 resultsCVE-2008-3494—8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leEPSS 2.8%CVE-2018-0497—ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based cEPSS 2.8%CVE-2006-5419—PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when register_globals is enablEPSS 2.8%CVE-2022-25076—TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerabilitEPSS 2.8%CVE-2022-25080—TOTOLink A830R V5.9c.4729_B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability aEPSS 2.8%CVE-2008-0431—Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to read arbitrary files vEPSS 2.8%CVE-2016-2821—Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenEPSS 2.8%CVE-2022-28118—SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.EPSS 2.8%CVE-2020-18703—XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.EPSS 2.8%CVE-2019-12163—GAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive information via {} in a ws/gatshipWs.asmx/SqlVersioEPSS 2.8%CVE-2006-6093—Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitraEPSS 2.8%CVE-2022-22815—path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.EPSS 2.8%CVE-2022-25079—TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerabilitEPSS 2.8%CVE-2014-2898—wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggersEPSS 2.8%CVE-2002-1840—irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackeEPSS 2.8%CVE-2009-3385—The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-aEPSS 2.8%CVE-2016-2046—Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web sEPSS 2.8%CVE-2014-2897—The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows reEPSS 2.8%CVE-2014-2896—The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified EPSS 2.8%CVE-2021-44732—Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.EPSS 2.8%