Vulnerabilities in N/A
161,455 resultsCVE-2014-6277—GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attEPSS 64.3%CVE-2022-44574—An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties onEPSS 64.3%CVE-2021-36450—Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.EPSS 64.3%CVE-1999-0504—A Windows NT local user or administrator account has a default, null, blank, or missing password.EPSS 64.3%CVE-2023-42326—An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php EPSS 64.3%CVE-2016-2296—Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remEPSS 64.3%CVE-2018-7297—Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/writEPSS 64.3%CVE-2011-0922—The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share EPSS 64.2%CVE-2006-5216—Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.EPSS 64.2%CVE-2007-3524—Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHPEPSS 64.2%CVE-2020-36243—The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To exploit the vulneraEPSS 64.1%CVE-2016-1593—Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated admiEPSS 64.1%CVE-2020-6113HIGHAn exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updatingEPSS 64.1%CVE-2020-13934—An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 procesEPSS 64.1%CVE-2008-5053—PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows remEPSS 64.1%CVE-2018-1000207—MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phptEPSS 64.1%CVE-2021-41081—Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search.EPSS 64.1%CVE-2011-1565—Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSSEPSS 64.1%CVE-2007-2939—Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL EPSS 64.0%CVE-2012-5067—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers tEPSS 64.0%