Vulnerabilities in n/a

161,084 results
CVE-2007-2165—The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module EPSS 12.2%CVE-2004-2292—Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command toEPSS 12.2%CVE-2013-4863—The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code viEPSS 12.2%CVE-2015-4147—The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __deEPSS 12.2%CVE-2007-1239—Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via EPSS 12.2%CVE-2007-1669—zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399,EPSS 12.2%CVE-2013-1300—win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SEPSS 12.2%CVE-2012-2213—Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in EPSS 12.2%CVE-2002-0826—Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.EPSS 12.2%CVE-2001-0829—A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, wEPSS 12.2%CVE-2015-1832—XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in placEPSS 12.2%CVE-2006-6121—Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.EPSS 12.2%CVE-2012-3797—Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packeEPSS 12.2%CVE-2019-7385—An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON productEPSS 12.2%CVE-2020-5724—The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthEPSS 12.2%CVE-2003-0825—The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly valEPSS 12.2%CVE-1999-0696—Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).EPSS 12.2%CVE-2007-1535—Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that TerEPSS 12.2%CVE-2015-7705—The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large nEPSS 12.2%CVE-2000-0597—Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force InteEPSS 12.1%