Vulnerabilities in N/A
161,029 resultsCVE-2022-35413—WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidentiEPSS 18.0%CVE-2011-1251—Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessiEPSS 18.0%CVE-2011-1266—The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in meEPSS 18.0%CVE-2011-1254—Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code EPSS 18.0%CVE-2018-4070—An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLinEPSS 18.0%CVE-2016-7277—Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documEPSS 18.0%CVE-2006-3266—Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attackerEPSS 18.0%CVE-2003-0110—The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) ServeEPSS 18.0%CVE-2006-2881—Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackersEPSS 18.0%CVE-2010-4345HIGHExim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confiEPSS 18.0%KEVCVE-2004-0633—The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ovEPSS 18.0%CVE-2020-24571—NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal.EPSS 18.0%CVE-2003-0817—Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.EPSS 18.0%CVE-2014-3510—The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allowsEPSS 17.9%CVE-2021-40651—OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbEPSS 17.9%CVE-2021-40418CRITICALWhen parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property EPSS 17.9%CVE-2020-27838—A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients EPSS 17.9%CVE-2019-5482CRITICALHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.EPSS 17.9%CVE-2010-2091—Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id paramEPSS 17.9%CVE-2010-1955—Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read aEPSS 17.9%