Vulnerabilities in n/a
161,457 resultsCVE-2002-1078—Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) cEPSS 2.8%CVE-2002-1382—Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave FlEPSS 2.8%CVE-2001-1566—Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format strinEPSS 2.8%CVE-2001-1081—Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service aEPSS 2.8%CVE-2002-0410—send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via EPSS 2.8%CVE-2015-1152—WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cEPSS 2.8%CVE-2022-26564—HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability via the prezzoperiodo4 parameter in creaprezEPSS 2.8%CVE-2009-4811—VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600EPSS 2.8%CVE-2007-3159—http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the ConEPSS 2.8%CVE-2005-0678—PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrarEPSS 2.8%CVE-2004-2560—DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbEPSS 2.8%CVE-2005-1375—Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to exEPSS 2.8%CVE-2018-4384—A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, watchOS 5.1.EPSS 2.8%CVE-2021-20270—An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a StandaEPSS 2.8%CVE-2004-2260—Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackersEPSS 2.8%CVE-2020-7043—An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostnEPSS 2.8%CVE-2016-2933—Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary filEPSS 2.8%CVE-2014-1207—VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by interceptiEPSS 2.8%CVE-2020-25867—SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without aEPSS 2.8%CVE-2010-3488—Directory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary files via a ... (triple dot) in the URL.EPSS 2.8%