Vulnerabilities in n/a

161,455 results
CVE-2025-56117HIGHOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POSTEPSS 3.1%CVE-2017-12719—An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to eEPSS 3.1%CVE-2020-13986—An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling RPL extension headerEPSS 3.1%CVE-2025-56109HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request toEPSS 3.1%CVE-2019-7564—An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn'EPSS 3.0%CVE-2016-9113—There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a valEPSS 3.0%CVE-2017-17602—Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.EPSS 3.0%CVE-2017-17601—Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.EPSS 3.0%CVE-2017-17600—Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.EPSS 3.0%CVE-2020-9487—In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a reqEPSS 3.0%CVE-2021-31810—An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response EPSS 3.0%CVE-2017-17651—Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/EPSS 3.0%CVE-2008-1862—ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackerEPSS 3.0%CVE-2007-5540—Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the samEPSS 3.0%CVE-2007-1075—TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline cEPSS 3.0%CVE-2017-17671—vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated requestEPSS 3.0%CVE-2010-3841—Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web scrEPSS 3.0%CVE-2017-17614—Food Order Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2018-6364—SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.EPSS 3.0%CVE-2017-17613—Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.EPSS 3.0%