Vulnerabilities in n/a
161,289 resultsCVE-2001-0818—A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the EPSS 4.0%CVE-2021-27556—The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type parEPSS 4.0%CVE-2018-14042—In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.EPSS 4.0%CVE-2021-31217—In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.EPSS 4.0%CVE-2018-19915—DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.EPSS 4.0%CVE-2016-5277—Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and ThunderEPSS 4.0%CVE-2008-7249—Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbiEPSS 4.0%CVE-2016-5276—Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox EEPSS 4.0%CVE-2014-3788—Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbiEPSS 4.0%CVE-2007-0372—Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the EPSS 4.0%CVE-2023-50089—A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution oEPSS 4.0%CVE-2015-2223—Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly CyveEPSS 4.0%CVE-2009-1443—Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors.EPSS 4.0%CVE-2006-4554—Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used EPSS 4.0%CVE-2013-7466—Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traverEPSS 4.0%CVE-2011-0504—Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arEPSS 4.0%CVE-2014-3984—Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.EPSS 4.0%CVE-2006-1951—Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafteEPSS 4.0%CVE-2008-2335—Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitraEPSS 4.0%CVE-2008-2186—Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to inEPSS 4.0%