Vulnerabilities in N/A
161,457 resultsCVE-2007-2257—PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitrary PHP code via a URLEPSS 2.7%CVE-2009-2723—Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectorsEPSS 2.7%CVE-2009-4192—Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary filEPSS 2.7%CVE-2009-2982—An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote aEPSS 2.7%CVE-2009-0316—Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitraryEPSS 2.7%CVE-2008-1392—The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the consoleEPSS 2.7%CVE-2020-1944—There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-EnEPSS 2.7%CVE-2009-1240—Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network MaEPSS 2.7%CVE-2011-2703—Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute EPSS 2.7%CVE-2016-6634—Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary weEPSS 2.7%CVE-2022-35254HIGHAn unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14EPSS 2.7%CVE-2017-2403—An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-sEPSS 2.7%CVE-2008-2146—wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remotEPSS 2.7%CVE-2001-1075—poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by EPSS 2.7%CVE-2011-0817—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on WindowsEPSS 2.7%CVE-2010-1309—Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary files via a .. (dot EPSS 2.7%CVE-2002-0353—The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, EPSS 2.7%CVE-2006-3203—The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remEPSS 2.7%CVE-2005-2334—Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cEPSS 2.7%CVE-2006-6213—index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct PHP remote file incEPSS 2.7%