Vulnerabilities in n/a
161,455 resultsCVE-2011-0456—webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified veEPSS 3.0%CVE-2017-17870—The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.EPSS 3.0%CVE-2017-15297—SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.EPSS 3.0%CVE-2005-1547—Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrarEPSS 3.0%CVE-2012-6599—The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticaEPSS 3.0%CVE-2012-6594—The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows rEPSS 3.0%CVE-2012-6598—The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arEPSS 3.0%CVE-2012-6602—The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated uEPSS 3.0%CVE-2019-9859—Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root acceEPSS 3.0%CVE-2022-31311—An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request.EPSS 3.0%CVE-2015-8012—lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.EPSS 3.0%CVE-2003-0180—Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demEPSS 3.0%CVE-2001-0869—Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow rEPSS 3.0%CVE-2015-1867—Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.EPSS 3.0%CVE-2016-7945—Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or iEPSS 3.0%CVE-2008-1818—Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08EPSS 3.0%CVE-2007-6033—Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated EPSS 3.0%CVE-1999-0255—Buffer overflow in ircd allows arbitrary command execution.EPSS 3.0%CVE-2001-1211—Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information fEPSS 3.0%CVE-2006-2431—Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application ServEPSS 3.0%