Vulnerabilities in n/a
161,457 resultsCVE-2022-45297CRITICALEQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter.EPSS 2.8%CVE-2005-1299—The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.EPSS 2.8%CVE-2006-2430—IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNEPSS 2.8%CVE-2016-4315—Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged userEPSS 2.8%CVE-2008-0361—Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary EPSS 2.8%CVE-2002-1052—Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using tEPSS 2.8%CVE-2003-1499—Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the inEPSS 2.8%CVE-2006-1354—Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (serEPSS 2.8%CVE-2019-10893—CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XEPSS 2.8%CVE-2024-46278HIGHTeedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.EPSS 2.8%CVE-2008-1579—Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error mEPSS 2.8%CVE-2019-19518—CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentialEPSS 2.8%CVE-2014-9452—Directory traversal vulnerability in VDG Security SENSE (formerly DIVA) 2.3.13 allows remote attackers to read arbitrary files via a .. (dotEPSS 2.8%CVE-2015-3319—Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackeEPSS 2.8%CVE-2014-3864—Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directoriEPSS 2.8%CVE-2014-8360—Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrarEPSS 2.8%CVE-2018-6003—An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER deEPSS 2.8%CVE-2016-7101—The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row valueEPSS 2.8%CVE-2009-1693—WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to reEPSS 2.8%CVE-2019-5459—An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.EPSS 2.8%