Vulnerabilities in n/a
161,457 resultsCVE-2012-4517—ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of sEPSS 2.8%CVE-2022-35132HIGHUsermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module.EPSS 2.8%CVE-2012-0865—Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and coEPSS 2.8%CVE-2022-0725—A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information ExpoEPSS 2.8%CVE-2021-39503—PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an atEPSS 2.8%CVE-2020-22937—A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious cEPSS 2.8%CVE-2016-0301—Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackEPSS 2.8%CVE-2003-0969—mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings toEPSS 2.8%CVE-2016-6595—The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a loEPSS 2.8%CVE-2006-5234—Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP code via a URL in thEPSS 2.8%CVE-2015-2121—HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a craftedEPSS 2.8%CVE-2024-37759CRITICALDataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data ViEPSS 2.8%CVE-2009-3405—Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remEPSS 2.8%CVE-2020-19822—A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via thEPSS 2.8%CVE-2018-9037—Monstra CMS 3.0.4 allows remote code execution via an upload_file request for a .zip file, which is automatically extracted and may contain EPSS 2.8%CVE-2006-2865—PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the paEPSS 2.8%CVE-2017-5626—OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to EPSS 2.8%CVE-2019-11565—Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter.EPSS 2.8%CVE-2021-44519—In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.EPSS 2.8%CVE-2019-11367—An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and EPSS 2.8%