Vulnerabilities in n/a
161,400 resultsCVE-2008-2648—Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploadEPSS 3.3%CVE-2007-0143—Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a UREPSS 3.3%CVE-2008-6814—Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allowsEPSS 3.3%CVE-2008-6581—login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie paEPSS 3.3%CVE-2006-5336—Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impacEPSS 3.3%CVE-2008-3764—Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHPEPSS 3.3%CVE-2018-18068—The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write anyEPSS 3.3%CVE-2008-5967—admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which alloEPSS 3.3%CVE-2007-5589—Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HEPSS 3.3%CVE-2008-6617—Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute arbitrary code by uplEPSS 3.3%CVE-2006-5335—Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors reEPSS 3.3%CVE-2007-1233—PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attackers to execute arbitrEPSS 3.3%CVE-2022-27406—FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_SizeEPSS 3.3%CVE-2007-5386—Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requEPSS 3.3%CVE-2020-7116—The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authEPSS 3.3%CVE-2020-7117—The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authEPSS 3.3%CVE-2007-4486—Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbitrary PHP code via a EPSS 3.3%CVE-2005-2244—The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.EPSS 3.3%CVE-2022-36756—DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.EPSS 3.3%CVE-2006-2261—PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the pathEPSS 3.3%