Vulnerabilities in n/a

161,401 results
CVE-2021-31757—An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAEPSS 3.3%CVE-2025-56094HIGHOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POSTEPSS 3.3%CVE-2013-0711—IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a EPSS 3.3%CVE-2004-1329—Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5EPSS 3.3%CVE-2004-1813—VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash (/).EPSS 3.3%CVE-2021-33503—An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authEPSS 3.3%CVE-2022-23348—BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.EPSS 3.3%CVE-2006-5493—PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute arEPSS 3.3%CVE-2017-11102—The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crasEPSS 3.3%CVE-2001-0269—pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.EPSS 3.3%CVE-2008-5679—The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalidEPSS 3.3%CVE-2004-2520—POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (application crash) via a largeEPSS 3.3%CVE-2013-3802—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allowEPSS 3.3%CVE-2019-10958—Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote auEPSS 3.3%CVE-2015-3688—CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 3.3%CVE-2014-4629—EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary EPSS 3.3%CVE-2017-17434—The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data strEPSS 3.3%CVE-2022-25241—In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).EPSS 3.3%CVE-2021-27370—The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.EPSS 3.3%CVE-2005-0428—The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a ranEPSS 3.3%