Vulnerabilities in n/a
161,457 resultsCVE-2011-3547—Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 EPSS 2.7%CVE-2013-7381—libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.nEPSS 2.7%CVE-2014-6221—The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x bEPSS 2.7%CVE-2008-1856—plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuratioEPSS 2.7%CVE-2012-3369—The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform beEPSS 2.7%CVE-2008-3776—Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) iEPSS 2.7%CVE-2006-5180—PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allowEPSS 2.7%CVE-2000-0904—Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document EPSS 2.7%CVE-2015-5988—The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtainEPSS 2.7%CVE-2001-1105—RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attacEPSS 2.7%CVE-2006-4102—PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers EPSS 2.7%CVE-2007-1595—The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to eEPSS 2.7%CVE-2000-1110—document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sendEPSS 2.7%CVE-2005-0818—Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or EPSS 2.7%CVE-2020-8443—In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-by-one heap-basEPSS 2.7%CVE-2010-2505—Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash) via a large number oEPSS 2.7%CVE-2011-2739—The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of filEPSS 2.7%CVE-2021-28150—Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) vEPSS 2.7%CVE-2000-0032—Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.EPSS 2.7%CVE-2004-0470—BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecuriEPSS 2.7%