Vulnerabilities in n/a
161,455 resultsCVE-2004-2045—The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of seEPSS 3.1%CVE-2005-3649—jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.EPSS 3.1%CVE-2020-26117—In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the ceEPSS 3.1%CVE-2020-13578HIGHA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request EPSS 3.1%CVE-2007-6017—The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for EPSS 3.1%CVE-2008-7122—Multiple insecure method vulnerabilities in an ActiveX control in (epRegPro.ocx) in Evans Programming Registry Pro allow remote attackers toEPSS 3.1%CVE-2008-5747—F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that EPSS 3.1%CVE-1999-1130—Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to readEPSS 3.1%CVE-2016-10212—Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof daEPSS 3.1%CVE-2001-0693—WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).EPSS 3.1%CVE-2023-31746CRITICALThere is a command injection vulnerability in the adslr VW2100 router with firmware version M1DV1.0. An unauthenticated attacker can exploitEPSS 3.1%CVE-2009-4014—Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackeEPSS 3.1%CVE-2007-1427—Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a .. EPSS 3.1%CVE-2016-0610—Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticatedEPSS 3.1%CVE-2021-3029—EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulaEPSS 3.1%CVE-2009-4762—MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchicEPSS 3.1%CVE-2005-3033—Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code EPSS 3.1%CVE-2013-5756—Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a .. (dot dotEPSS 3.1%CVE-2020-9026—ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also aEPSS 3.1%CVE-2018-18585—chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as tEPSS 3.1%