Vulnerabilities in n/a

161,457 results
CVE-2023-38952HIGHInsecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that sesEPSS 2.7%CVE-2026-29963HIGHHSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. EPSS 2.7%CVE-2007-2769—BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitEPSS 2.7%CVE-2008-4618—The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violatiEPSS 2.7%CVE-2012-2118—Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service oEPSS 2.7%CVE-2020-10760—A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuratioEPSS 2.7%CVE-2003-1037—Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary coEPSS 2.7%CVE-2004-0324—Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters suchEPSS 2.7%CVE-2007-6177—PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbitrary PHP code via a UEPSS 2.7%CVE-2017-12424—In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed inEPSS 2.7%CVE-2002-1870—Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to EPSS 2.7%CVE-2002-1675—Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of serviEPSS 2.7%CVE-2005-0272—ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple exteEPSS 2.7%CVE-2006-0604—check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackeEPSS 2.7%CVE-2008-6083—Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files viaEPSS 2.7%CVE-2016-1000339—In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table EPSS 2.7%CVE-2004-1831—Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large length EPSS 2.7%CVE-2020-11451—The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files wEPSS 2.7%CVE-2019-13552—In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-suppliedEPSS 2.7%CVE-2020-35681—Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channelsEPSS 2.7%