Vulnerabilities in n/a
161,057 resultsCVE-2020-24397—An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an EPSS 15.4%CVE-2021-36748—A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote aEPSS 15.4%CVE-2018-18556—A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary wEPSS 15.4%CVE-2018-4968—Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap OverfloEPSS 15.4%CVE-2018-4947—Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap OverfloEPSS 15.4%CVE-2012-1861—Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and OffiEPSS 15.4%CVE-2018-4966—Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap OverfloEPSS 15.4%CVE-2018-4978—Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap OverfloEPSS 15.4%CVE-2018-4984—Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap OverfloEPSS 15.4%CVE-2018-4948—Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap OverfloEPSS 15.4%CVE-2024-38814HIGHAn authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A
malicious authenticated user with non-adminiEPSS 15.4%CVE-2007-1383CRITICALInteger overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowiEPSS 15.4%CVE-2020-35736—GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.EPSS 15.4%CVE-2017-9414—Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the EPSS 15.4%CVE-2022-47745HIGHZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a sEPSS 15.4%CVE-2022-35583—wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag witEPSS 15.4%CVE-2006-2055—Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an EPSS 15.4%CVE-2016-8207—A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.EPSS 15.4%CVE-2008-2841—Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute EPSS 15.4%CVE-2010-4719—Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files EPSS 15.4%