Vulnerabilities in n/a
161,457 resultsCVE-2019-14259—On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP addEPSS 2.8%CVE-2019-12413—In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specEPSS 2.8%CVE-2019-14260—On the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection (missing input valEPSS 2.8%CVE-2014-3554—Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly eEPSS 2.8%CVE-2013-1405—VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b anEPSS 2.8%CVE-2020-14399—An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NEPSS 2.8%CVE-2007-2900—Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary PHP code via a URL inEPSS 2.8%CVE-2021-34165—A SQL Injection vulnerability in Sourcecodester Basic Shopping Cart 1.0 allows a remote attacker to Bypass Authentication and become Admin.EPSS 2.8%CVE-2014-2685—The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 beforeEPSS 2.8%CVE-2019-17675—WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSEPSS 2.8%CVE-2012-5978—Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 EPSS 2.8%CVE-2012-5051—Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors.EPSS 2.8%CVE-2023-50651CRITICALTOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cEPSS 2.8%CVE-2007-6585—PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to execute arbitrary PHPEPSS 2.8%CVE-2018-19541—An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18EPSS 2.8%CVE-2005-1423—Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service anEPSS 2.8%CVE-2018-16376—An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c.EPSS 2.8%CVE-2016-3422—Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.EPSS 2.8%CVE-2018-6869—In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. RemoteEPSS 2.8%CVE-2021-32946—An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prioEPSS 2.8%