Vulnerabilities in n/a
161,455 resultsCVE-2019-3960—Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uplEPSS 3.0%CVE-2017-6895—USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml.EPSS 3.0%CVE-2005-3520—Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1)EPSS 3.0%CVE-2011-4415—The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif moduEPSS 3.0%CVE-2016-7246—The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1EPSS 3.0%CVE-2019-11361—Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually EPSS 3.0%CVE-2018-11362—In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.cEPSS 3.0%CVE-2011-1971—The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file EPSS 3.0%CVE-2019-17625—There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The probEPSS 3.0%CVE-2016-7215—The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 EPSS 3.0%CVE-2020-24635—A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): ArubaEPSS 3.0%CVE-2021-25146—A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): ArubaEPSS 3.0%CVE-2015-7192—The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, whEPSS 3.0%CVE-2006-1479—Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote attackers to inject arbiEPSS 3.0%CVE-2008-5840—PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies tEPSS 3.0%CVE-2017-6925—In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, EPSS 3.0%CVE-2019-17666—rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to EPSS 3.0%CVE-2007-3556—Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloaEPSS 3.0%CVE-2013-3462—Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2aEPSS 3.0%CVE-2011-0430—Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to EPSS 3.0%