Vulnerabilities in n/a
161,398 resultsCVE-2002-2091—Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the usernamEPSS 3.5%CVE-2017-14839—TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.EPSS 3.5%CVE-2003-1283—KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could allow remote attackers EPSS 3.5%CVE-2006-1994—PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFOEPSS 3.5%CVE-2009-1572—The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing AEPSS 3.5%CVE-2017-14838—TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.EPSS 3.5%CVE-2017-14840—TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.EPSS 3.5%CVE-2015-2190—epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remoteEPSS 3.5%CVE-2019-18364—In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.EPSS 3.5%CVE-2020-26145—An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent)EPSS 3.5%CVE-2015-6473—WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.EPSS 3.5%CVE-2016-3945—Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -bEPSS 3.5%CVE-2009-3275—Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allEPSS 3.5%CVE-2010-0714—Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus WorkplaEPSS 3.5%CVE-2004-1912—The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used iEPSS 3.5%CVE-2011-3517—Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability viEPSS 3.5%CVE-2017-7272—PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that EPSS 3.5%CVE-2013-7375—SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execEPSS 3.5%CVE-2007-2268—Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary fiEPSS 3.5%CVE-2014-0248—org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JEPSS 3.5%