Vulnerabilities in N/A
161,457 resultsCVE-2003-0531—Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser EPSS 26.5%CVE-2016-3234—Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint EPSS 26.5%CVE-2008-6938—Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attEPSS 26.5%CVE-2016-3351MEDIUMMicrosoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aEPSS 26.5%KEVCVE-2010-4598—Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dEPSS 26.5%CVE-2024-27497HIGHLinksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.EPSS 26.5%CVE-2009-2523—The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message cEPSS 26.5%CVE-2009-1135—Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication EPSS 26.5%CVE-2023-23590HIGHMercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated EPSS 26.4%CVE-1999-0918—Denial of service in various Windows systems via malformed, fragmented IGMP packets.EPSS 26.4%CVE-2018-4072—An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLinkEPSS 26.4%CVE-2021-31630—Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on EPSS 26.4%CVE-2022-24627CRITICALAn issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameEPSS 26.4%CVE-2011-4518—Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to readEPSS 26.4%CVE-2000-0710—The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the servEPSS 26.4%CVE-2019-19576—class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omEPSS 26.4%CVE-2019-11013—Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to travEPSS 26.4%CVE-2011-3412—Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leveEPSS 26.4%CVE-2011-0980—Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse OfficeEPSS 26.4%CVE-2017-16642—In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' aEPSS 26.4%