Vulnerabilities in n/a
161,129 resultsCVE-2014-2223—Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authenticated users to exeEPSS 10.0%CVE-2004-1892—Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackeEPSS 10.0%CVE-2016-9555—The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, whichEPSS 10.0%CVE-2000-0115—IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.EPSS 10.0%CVE-2008-5357—Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK aEPSS 10.0%CVE-2021-40847—The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code executioEPSS 10.0%CVE-2014-5470CRITICALActual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input dataEPSS 10.0%CVE-2008-7126—Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of seEPSS 10.0%CVE-2011-0013—Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, andEPSS 10.0%CVE-2018-20523—Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other EPSS 10.0%CVE-2018-20782—The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.EPSS 10.0%CVE-2013-2474—Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter.EPSS 10.0%CVE-2008-2511—Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA IntEPSS 10.0%CVE-2006-2460—Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS EPSS 10.0%CVE-2018-19043—The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename) via a ../ directoryEPSS 10.0%CVE-2018-19042—The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dir_from and dir_to paEPSS 10.0%CVE-2013-0613—Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrEPSS 10.0%CVE-2016-4121—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before EPSS 10.0%CVE-2020-12078—An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An aEPSS 10.0%CVE-2000-0213—The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via sheEPSS 10.0%