Vulnerabilities in n/a
161,455 resultsCVE-2013-3274—EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorizatioEPSS 3.1%CVE-2014-8114—The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafEPSS 3.1%CVE-2002-0919—CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title fiEPSS 3.1%CVE-2014-8710—The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remotEPSS 3.1%CVE-2014-4613—Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the autEPSS 3.1%CVE-2017-12967—The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remoteEPSS 3.1%CVE-2014-8712—The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x befoEPSS 3.1%CVE-2018-19183—ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" EPSS 3.1%CVE-2021-27219—An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit plaEPSS 3.1%CVE-2004-0668—Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail message, as demonstrEPSS 3.1%CVE-2007-0292—Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aEPSS 3.1%CVE-2006-0865—PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts quickEPSS 3.1%CVE-2020-25015—A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and oEPSS 3.1%CVE-2025-50578CRITICALLinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically `X-Forwarded-Host` aEPSS 3.1%CVE-2007-1604—Multiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers to upload and execute arbitrary PHP code (1)EPSS 3.1%CVE-2004-1195—Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a join request that contEPSS 3.1%CVE-2018-19798—Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-TypeEPSS 3.1%CVE-2004-0298—CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.EPSS 3.1%CVE-2005-2208—PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.EPSS 3.1%CVE-2007-1636—Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sEPSS 3.1%