Vulnerabilities in N/A
161,455 resultsCVE-2023-29552HIGHThe Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow thEPSS 64.0%KEVCVE-2014-8636—The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that haEPSS 63.9%CVE-2009-3711—Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a dEPSS 63.9%CVE-2018-16283—The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.EPSS 63.9%CVE-2014-5350—Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files viaEPSS 63.9%CVE-2017-11165—dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for thEPSS 63.9%CVE-2012-2019—Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka EPSS 63.9%CVE-2009-2936—The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before EPSS 63.8%CVE-2018-18852—Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING featureEPSS 63.8%CVE-2019-6447—The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute appliEPSS 63.8%CVE-2019-14287—In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, aEPSS 63.8%CVE-2006-3726—Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary coEPSS 63.7%CVE-2012-5201—Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) beEPSS 63.7%CVE-2012-6329—The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fEPSS 63.7%CVE-2012-0299—The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary codeEPSS 63.7%CVE-2020-26935—An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered inEPSS 63.7%CVE-2005-3155—Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.EPSS 63.7%CVE-2011-0647—The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows reEPSS 63.7%CVE-2023-43261HIGHAn information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router componentsEPSS 63.7%CVE-2024-37014HIGHLangflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and pEPSS 63.7%