Vulnerabilities in N/A

161,457 results
CVE-2022-42161HIGHD-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at functioEPSS 2.8%CVE-2018-1000078—RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 seriesEPSS 2.7%CVE-2002-0490—Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands vEPSS 2.7%CVE-2020-14398—An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.cEPSS 2.7%CVE-2001-0388—time server daemon timed allows remote attackers to cause a denial of service via malformed packets.EPSS 2.7%CVE-2002-0882—The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibEPSS 2.7%CVE-2015-5244—The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.EPSS 2.7%CVE-2019-9617—An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does notEPSS 2.7%CVE-2014-4868—The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitraryEPSS 2.7%CVE-2011-5331—Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.EPSS 2.7%CVE-2000-0412—The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitEPSS 2.7%CVE-1999-0149—The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.EPSS 2.7%CVE-2006-5767—PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to executEPSS 2.7%CVE-2015-7272—Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows attackers to cause a denial of service (buffEPSS 2.7%CVE-2013-4408—Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22,EPSS 2.7%CVE-2019-12312—In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiatEPSS 2.7%CVE-2015-8965—Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classEPSS 2.7%CVE-2018-10740—Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconEPSS 2.7%CVE-2013-4376—The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via uEPSS 2.7%CVE-2022-34049—An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration datEPSS 2.7%