Vulnerabilities in N/A
159,958 resultsCVE-2017-9100—login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spacEPSS 85.5%CVE-2011-0063—The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal aEPSS 85.5%CVE-2003-0545—Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code EPSS 85.4%CVE-2022-27924HIGHZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instaEPSS 85.4%KEVCVE-2015-3828—The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minEPSS 85.4%CVE-2005-2086—PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.EPSS 85.4%CVE-2013-2423LOWUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows rEPSS 85.3%KEVCVE-2006-5444—Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2EPSS 85.3%CVE-2020-35476—A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is wrEPSS 85.3%CVE-2009-0075—Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to eEPSS 85.3%CVE-2014-0322HIGHUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involvingEPSS 85.2%KEVCVE-2006-4847—Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via longEPSS 85.2%CVE-1999-1053—guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execEPSS 85.2%CVE-2001-0499—Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges viEPSS 85.2%CVE-2019-20361HIGHThere was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the dataEPSS 85.1%CVE-2018-6000—An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides EPSS 85.0%CVE-2023-52251HIGHAn issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/EPSS 85.0%CVE-2009-2335—WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, EPSS 85.0%CVE-2013-3906HIGHGDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; andEPSS 85.0%KEVCVE-2006-3439—Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including EPSS 85.0%