Vulnerabilities in N/A
161,455 resultsCVE-2017-8895—In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerEPSS 71.0%CVE-2013-2641—Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files viaEPSS 71.0%CVE-2022-28810MEDIUMZoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commandEPSS 71.0%KEVCVE-2015-0096—Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SEPSS 71.0%CVE-2003-0213—ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which EPSS 70.9%CVE-1999-0513—ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.EPSS 70.9%CVE-2016-6195—SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 alEPSS 70.9%CVE-2011-3492—Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) EPSS 70.9%CVE-2005-2877—The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metachaEPSS 70.9%CVE-2011-0073—Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, whichEPSS 70.9%CVE-2014-5460—Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated userEPSS 70.9%CVE-2016-5675—handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETEPSS 70.9%CVE-2020-11456—LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroEPSS 70.8%CVE-2018-18778—ACME mini_httpd before 1.30 lets remote users read arbitrary files.EPSS 70.8%CVE-2024-25723HIGHZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{usEPSS 70.8%CVE-2024-22729CRITICALNETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.EPSS 70.8%CVE-2021-35064—KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangEPSS 70.8%CVE-2005-2799—Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to executEPSS 70.8%CVE-2021-45467CRITICALIn CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.phEPSS 70.7%CVE-2018-18323—CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=filEPSS 70.7%