Vulnerabilities in n/a
161,455 resultsCVE-2017-17662—Directory traversal in the HTTP server on Yawcam 0.2.6 through 0.6.0 devices allows attackers to read arbitrary files through a sequence of EPSS 3.2%CVE-2013-5672—Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hiEPSS 3.2%CVE-2019-20920—Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templatEPSS 3.2%CVE-2013-5977—Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote aEPSS 3.2%CVE-2012-2240—scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "aEPSS 3.2%CVE-2021-36388—In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerEPSS 3.2%CVE-2020-13228—An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.EPSS 3.2%CVE-2008-5262—Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers EPSS 3.2%CVE-2020-15467—The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execuEPSS 3.2%CVE-2019-16159—BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8EPSS 3.2%CVE-2012-4879—The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default passwordEPSS 3.2%CVE-2008-1927—Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a EPSS 3.2%CVE-2010-2276—The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.xEPSS 3.2%CVE-2015-7111—The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrEPSS 3.2%CVE-2012-3013—WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web BaseEPSS 3.2%CVE-2023-6779HIGHGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()EPSS 3.2%CVE-2019-19782—The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.EPSS 3.2%CVE-2007-5338—Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by usiEPSS 3.2%CVE-2025-56093HIGHOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POSTEPSS 3.2%CVE-2021-28132—LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support sectiEPSS 3.2%