Vulnerabilities in n/a

161,457 results
CVE-2005-2140—Directory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read arbitrary files via ".." sequences in the fEPSS 2.7%CVE-2023-43206HIGHD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler. ThiEPSS 2.7%CVE-2021-41619—An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code execution via the application startup configuraEPSS 2.7%CVE-2006-1164—Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which aEPSS 2.7%CVE-2017-17084—In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpaEPSS 2.7%CVE-2005-2407—A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window aboveEPSS 2.7%CVE-2002-2143—The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorizedEPSS 2.7%CVE-2004-2373—The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers tEPSS 2.7%CVE-2017-17083—In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c bEPSS 2.7%CVE-2017-17818—In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a EPSS 2.7%CVE-2012-4618—The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of seEPSS 2.7%CVE-2018-6836—The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory aEPSS 2.7%CVE-2021-30213—Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in '/seEPSS 2.7%CVE-2022-40089CRITICALA remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP fileEPSS 2.7%CVE-2013-0600—Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass auEPSS 2.7%CVE-2009-2383—SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitraryEPSS 2.7%CVE-2011-1176—The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP SeEPSS 2.7%CVE-2014-6386—Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47EPSS 2.7%CVE-2009-4424—SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbitrary SQL commands vEPSS 2.7%CVE-2012-2167—The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service (device outage) via TCP packets to unspEPSS 2.7%