Vulnerabilities in n/a

161,455 results
CVE-2013-6920—Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote EPSS 3.2%CVE-2013-7177—config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbEPSS 3.2%CVE-2013-7176—config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitraryEPSS 3.2%CVE-2021-22968—A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concreteEPSS 3.2%CVE-2014-9328—ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds coEPSS 3.2%CVE-2018-1000824—MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential dEPSS 3.2%CVE-2009-1710—WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and EPSS 3.2%CVE-2006-6150—PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute arbitrary PHP code EPSS 3.2%CVE-2006-1138—Unspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or EPSS 3.2%CVE-2020-6018—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::DecryEPSS 3.2%CVE-2020-25149—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.2%CVE-2020-25145—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.2%CVE-2021-31909—In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.EPSS 3.2%CVE-1999-0428—OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.EPSS 3.2%CVE-2020-25144—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.2%CVE-2014-4265—Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to DEPSS 3.2%CVE-2006-5458—PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code EPSS 3.2%CVE-2010-2322—Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwritEPSS 3.2%CVE-2017-9671—A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, byEPSS 3.2%CVE-2020-6017—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegmentEPSS 3.2%