Vulnerabilities in N/A
161,457 resultsCVE-2004-2368—PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempatEPSS 2.8%CVE-2008-6288—Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to read arbitrary filesEPSS 2.8%CVE-2005-0678—PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrarEPSS 2.8%CVE-2002-1382—Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave FlEPSS 2.8%CVE-2009-1602—Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU consumptioEPSS 2.8%CVE-2001-1566—Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format strinEPSS 2.8%CVE-2001-1081—Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service aEPSS 2.8%CVE-2002-0410—send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via EPSS 2.8%CVE-2002-1078—Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) cEPSS 2.8%CVE-2016-2933—Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary filEPSS 2.8%CVE-2020-25867—SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without aEPSS 2.8%CVE-2014-1207—VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by interceptiEPSS 2.8%CVE-2006-0695—Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrarEPSS 2.8%CVE-2007-3159—http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the ConEPSS 2.8%CVE-2010-3488—Directory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary files via a ... (triple dot) in the URL.EPSS 2.8%CVE-2019-12771—Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or afEPSS 2.8%CVE-2011-4353—The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7EPSS 2.8%CVE-2004-2260—Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackersEPSS 2.8%CVE-2018-4384—A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, watchOS 5.1.EPSS 2.8%CVE-2020-7043—An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostnEPSS 2.8%