Vulnerabilities in n/a

161,456 results
CVE-2021-23326MEDIUMCommand InjectionEPSS 2.8%CVE-2019-19070—A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a deniEPSS 2.8%CVE-2024-34338HIGHTenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/EPSS 2.8%CVE-2018-1000628—Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against aEPSS 2.8%CVE-2020-15895—An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc/js/info.php, no output filtration is appEPSS 2.8%CVE-2016-4503—Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectoEPSS 2.8%CVE-2007-2691—MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allEPSS 2.8%CVE-2008-3727—Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers toEPSS 2.8%CVE-2015-2652—Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.3, anEPSS 2.8%CVE-2006-3051—Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to injectEPSS 2.8%CVE-2004-2176—The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users tEPSS 2.8%CVE-2020-29437—SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orEPSS 2.8%CVE-2006-1154—PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the COEPSS 2.8%CVE-2015-5302—libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensiEPSS 2.8%CVE-2014-1586—content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consEPSS 2.8%CVE-2025-57105CRITICALThe DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub_478DEPSS 2.8%CVE-2020-15004—OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.EPSS 2.8%CVE-2017-1000476—ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to caEPSS 2.8%CVE-2015-0529—EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it eEPSS 2.8%CVE-2014-1585—The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and ThunderbirdEPSS 2.8%