Vulnerabilities in n/a
161,272 resultsCVE-2005-3636—Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or EPSS 5.1%CVE-2019-11535—Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote commEPSS 5.1%CVE-2017-13997—A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouchEPSS 5.1%CVE-2009-5112—wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.EPSS 5.1%CVE-2014-3086—Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other produEPSS 5.1%CVE-2007-4104—Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbEPSS 5.1%CVE-2014-2709—lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecifiEPSS 5.1%CVE-2017-5196—Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving stringsEPSS 5.1%CVE-2014-3693—Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote atEPSS 5.1%CVE-2008-7070—Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quotEPSS 5.1%CVE-2016-1935—Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to exeEPSS 5.1%CVE-2015-7244—The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authEPSS 5.0%CVE-2015-6934—Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x,EPSS 5.0%CVE-2006-4181—Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers EPSS 5.0%CVE-2007-0368—Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT envEPSS 5.0%CVE-2008-2922—Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of service (application craEPSS 5.0%CVE-2016-6489—The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.EPSS 5.0%CVE-2010-0114—fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allowEPSS 5.0%CVE-2007-1702—PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to executeEPSS 5.0%CVE-2014-0065—Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 EPSS 5.0%