Vulnerabilities in N/A
161,455 resultsCVE-2019-12169—ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive tEPSS 72.2%CVE-2009-1943—Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitraryEPSS 72.2%CVE-2006-7196—Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0EPSS 72.2%CVE-2014-8684—CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies andEPSS 72.2%CVE-2019-16724—File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) basEPSS 72.2%CVE-2021-33564—An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files EPSS 72.1%CVE-2014-9727—AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.EPSS 72.1%CVE-2019-2215HIGHA use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exEPSS 72.1%KEVCVE-2014-0514—The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to eEPSS 72.1%CVE-2004-2271—Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.EPSS 72.1%CVE-2019-8903—index.js in Total.js Platform before 3.2.3 allows path traversal.EPSS 72.1%CVE-2021-30117CRITICALAuthenticated SQL injection in Kaseya VSA < v9.5.6EPSS 72.1%CVE-2001-0236—Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication"EPSS 72.0%CVE-2012-1856HIGHThe TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 200EPSS 72.0%KEVCVE-2007-4320—PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHEPSS 72.0%CVE-2009-0478—Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request wEPSS 72.0%CVE-2021-40859—Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management appEPSS 72.0%CVE-2016-0117—The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackEPSS 71.9%CVE-2021-25296HIGHNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/confiEPSS 71.9%KEVCVE-2006-2407—Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreEPSS 71.9%