Vulnerabilities in N/A
159,958 resultsCVE-2018-10095—Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the forEPSS 87.0%CVE-2013-0640HIGHAdobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cEPSS 87.0%KEVCVE-2016-20016CRITICALMVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote EPSS 87.0%CVE-2018-4993—Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO haEPSS 86.9%CVE-1999-0067—phf CGI program allows remote command execution through shell metacharacters.EPSS 86.9%CVE-2004-2111—Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via EPSS 86.9%CVE-2004-1857—Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files vEPSS 86.8%CVE-2017-18362CRITICALConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct acEPSS 86.8%KEVCVE-2018-0101—A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an uEPSS 86.8%CVE-2020-13151—Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, asEPSS 86.7%CVE-2005-4360—The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrEPSS 86.7%CVE-2021-32305—WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.EPSS 86.7%CVE-2015-8103—The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serEPSS 86.7%CVE-2020-25687—A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before itEPSS 86.7%CVE-2015-2426HIGHBuffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, EPSS 86.7%KEVCVE-2020-8644CRITICALPlaySMS before 1.4.3 does not sanitize inputs from a malicious string.EPSS 86.7%KEVCVE-2023-35813—Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce througEPSS 86.7%CVE-2018-10661—An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.EPSS 86.7%CVE-2021-40655HIGHAn informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forEPSS 86.7%KEVCVE-2015-2996—Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (doEPSS 86.6%