Vulnerabilities in n/a
161,083 resultsCVE-2024-54794CRITICALThe script input feature of SpagoBI 3.5.1 allows arbitrary code execution.EPSS 12.8%CVE-2000-0156—Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "ImagEPSS 12.8%CVE-1999-0281—Denial of service in IIS using long URLs.EPSS 12.8%CVE-2013-3357—Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitEPSS 12.8%CVE-2013-3358—Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitEPSS 12.8%CVE-2024-25832HIGHF-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of danEPSS 12.8%CVE-2014-3000—The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 aEPSS 12.8%CVE-2020-24786—An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService EPSS 12.8%CVE-2009-5092—Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to injeEPSS 12.8%CVE-2005-2629—Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execEPSS 12.8%CVE-2016-3376—The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 EPSS 12.8%CVE-2015-6061—Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room SysEPSS 12.8%CVE-2025-28219CRITICALNetgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary coEPSS 12.8%CVE-2007-5606—Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support befoEPSS 12.8%CVE-2007-5607—Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant SupporEPSS 12.8%CVE-2023-35036CRITICALIn Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL inEPSS 12.8%CVE-2007-3697—PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code EPSS 12.8%CVE-1999-0896—Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username EPSS 12.8%CVE-2019-20049—An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal (which hEPSS 12.8%CVE-2004-2275—i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter.EPSS 12.8%