Vulnerabilities in N/A

161,457 results
CVE-2019-16124—In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuratiEPSS 27.6%CVE-2012-2215—Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attaEPSS 27.6%CVE-2016-0005—Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet ExpEPSS 27.6%CVE-2017-17888—cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, EPSS 27.6%CVE-2013-3686—cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password viEPSS 27.6%CVE-2015-7254—Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. (dotEPSS 27.5%CVE-2023-36177CRITICALAn issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information EPSS 27.5%CVE-2010-0492HIGHUse-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors reEPSS 27.5%CVE-2010-2556—Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code EPSS 27.5%CVE-2010-2557—Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessiEPSS 27.5%CVE-2010-2559—Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessiEPSS 27.5%CVE-2016-0486—Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 EPSS 27.5%CVE-2016-0485—Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 EPSS 27.5%CVE-2018-12327—Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher priEPSS 27.5%CVE-2007-3550—Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wiEPSS 27.5%CVE-2007-0933—Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ (Rev. A1) on Windows XP allows remote attackers to cause a denial of seEPSS 27.5%CVE-2017-8686—The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code EPSS 27.5%CVE-2013-6438—The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespaEPSS 27.5%CVE-2004-0848—Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing longEPSS 27.5%CVE-2007-5344—Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creEPSS 27.5%