Vulnerabilities in n/a
161,455 resultsCVE-2024-26503CRITICALUnrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code vEPSS 3.0%CVE-2015-5922—Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS beforeEPSS 3.0%CVE-2001-0074—Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the EPSS 3.0%CVE-2000-0914—OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.EPSS 3.0%CVE-2001-0306—Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) EPSS 3.0%CVE-2000-0903—Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files EPSS 3.0%CVE-2021-25953—Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to EPSS 3.0%CVE-2016-10308—Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the samEPSS 3.0%CVE-2005-1360—PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the pEPSS 3.0%CVE-2018-5784—In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leveraEPSS 3.0%CVE-2014-10024—Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote aEPSS 3.0%CVE-2010-2523—Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND_EPSS 3.0%CVE-2005-3461—Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identiEPSS 3.0%CVE-2014-5107—concrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct request to (1) system/basics/editor.php, (2) sysEPSS 3.0%CVE-2020-24036—PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicEPSS 3.0%CVE-2006-2936—The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a dEPSS 3.0%CVE-2008-3079—Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.EPSS 3.0%CVE-2007-6304—The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUSEPSS 3.0%CVE-2014-2959—logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup systeEPSS 3.0%CVE-2010-1894—The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspeEPSS 3.0%