Vulnerabilities in n/a

161,457 results
CVE-2017-7284—An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change EPSS 2.7%CVE-2019-0216—A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page viewEPSS 2.7%CVE-2013-0303—Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users tEPSS 2.7%CVE-2016-0740—Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite EPSS 2.7%CVE-2016-1365—The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticatEPSS 2.7%CVE-2018-7654—On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the serveEPSS 2.7%CVE-2016-9125—Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, byEPSS 2.7%CVE-2007-5862—Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbitrary Keychain items EPSS 2.7%CVE-2007-0460—Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors rEPSS 2.7%CVE-2026-24516HIGHA command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2. The troubleshooting actioner component (internal/troubEPSS 2.7%CVE-2024-56898HIGHBroken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perfoEPSS 2.7%CVE-2025-44868CRITICALWavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp pEPSS 2.7%CVE-2012-1600—Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary wEPSS 2.7%CVE-2006-6328—Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequenEPSS 2.7%CVE-1999-1506—Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.EPSS 2.7%CVE-2006-6329—index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter.EPSS 2.7%CVE-2000-1107—in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the sEPSS 2.7%CVE-2018-25080LOWMobileDetect Example session_example.php initLayoutType cross site scriptingEPSS 2.7%CVE-2015-3753—WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properEPSS 2.7%CVE-2017-15193—In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectoEPSS 2.7%