Vulnerabilities in N/A
161,457 resultsCVE-2022-37159—Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.EPSS 28.0%CVE-2010-1225—The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, VirtuEPSS 28.0%CVE-2018-7171—Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directoriesEPSS 27.9%CVE-2011-0034—Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server EPSS 27.9%CVE-2009-3720—The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allowEPSS 27.9%CVE-2021-28151—Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgEPSS 27.9%CVE-2018-12692—TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell meEPSS 27.9%CVE-2001-1451—Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allEPSS 27.9%CVE-2012-1185—Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to causeEPSS 27.9%CVE-2019-10663—Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a lEPSS 27.9%CVE-2021-40410CRITICALAn OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] thEPSS 27.9%CVE-2018-15531—JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.EPSS 27.9%CVE-2007-5056—Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPEPSS 27.9%CVE-2012-2333—Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC enEPSS 27.9%CVE-2020-25112—An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extension lengths. This leadEPSS 27.9%CVE-1999-0002—Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.EPSS 27.9%CVE-2020-29134—The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1EPSS 27.8%CVE-2010-4741—Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to executEPSS 27.8%CVE-2017-14335—On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/SecuriEPSS 27.8%CVE-2018-14707—Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload fEPSS 27.8%