Vulnerabilities in N/A
161,457 resultsCVE-2010-0817—Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and ShaEPSS 28.7%CVE-2008-4384—Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow reEPSS 28.7%CVE-2015-8277—Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote atEPSS 28.7%CVE-2022-45768HIGHCommand Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitraryEPSS 28.7%CVE-2015-2515—Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, EPSS 28.7%CVE-1999-0517MEDIUMAn SNMP community name is the default (e.g. public), null, or missing.EPSS 28.7%CVE-2024-39614HIGHAn issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denialEPSS 28.6%CVE-2018-4879—An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andEPSS 28.6%CVE-2006-1540—MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute EPSS 28.6%CVE-2018-14058—Pimcore before 5.3.0 allows SQL Injection via the REST web service API.EPSS 28.6%CVE-2011-4642—mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which alloEPSS 28.6%CVE-2011-2950—Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 thEPSS 28.6%CVE-2008-4109—A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE useEPSS 28.6%CVE-2004-1782—athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameteEPSS 28.6%CVE-2022-27115—In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.EPSS 28.6%CVE-2009-1545—Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, SeEPSS 28.6%CVE-2009-0552—Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and EPSS 28.6%CVE-2011-5164—Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a cEPSS 28.6%CVE-2015-0008—The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8EPSS 28.6%CVE-2016-1000—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before EPSS 28.6%