Vulnerabilities in N/A
161,455 resultsCVE-2015-8249—The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary filEPSS 73.6%CVE-2008-0084—Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang andEPSS 73.6%CVE-2021-37346—Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements EPSS 73.6%CVE-2015-3826—The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minEPSS 73.6%CVE-2006-3838—Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) SideEPSS 73.6%CVE-2006-2630—Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknownEPSS 73.6%CVE-2023-35885CRITICALCloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.EPSS 73.5%CVE-2004-0608—The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2EPSS 73.5%CVE-2012-4958—Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FEPSS 73.5%CVE-2020-24881—SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.EPSS 73.4%CVE-2007-1697—PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code EPSS 73.4%CVE-2017-17560—An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uplEPSS 73.4%CVE-2023-38992—jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.EPSS 73.4%CVE-2021-32610—In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.EPSS 73.4%CVE-2013-0758—Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before EPSS 73.4%CVE-2008-0621—Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary cEPSS 73.4%CVE-2006-0992—Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a lEPSS 73.4%CVE-2007-2815—The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACLEPSS 73.4%CVE-2004-0362—Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various ReEPSS 73.3%CVE-2011-3389—The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, OpEPSS 73.3%