Vulnerabilities in n/a

161,173 results
CVE-2006-0891—Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .. (dot dot) sequenceEPSS 8.5%CVE-2010-2083—Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to byEPSS 8.5%CVE-2014-0095—java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service EPSS 8.5%CVE-2010-0716—_layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web EPSS 8.5%CVE-2007-4533—Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code vEPSS 8.5%CVE-2018-20658—The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted XEPSS 8.5%CVE-2013-4330—Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple languaEPSS 8.5%CVE-2016-0749—The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitraEPSS 8.5%CVE-2017-0900—RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyEPSS 8.5%CVE-2009-4257—Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 thEPSS 8.5%CVE-2025-29268CRITICALALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.EPSS 8.5%CVE-2019-10848—Computrols CBAS 18.0.0 allows Username Enumeration.EPSS 8.5%CVE-2009-1789—mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) viaEPSS 8.5%CVE-2000-1025—eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that coEPSS 8.5%CVE-2005-4558—IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict accepEPSS 8.5%CVE-2005-4680—Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files aEPSS 8.5%CVE-2014-0510—Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protectionEPSS 8.5%CVE-2021-31760—Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feaEPSS 8.5%CVE-2018-7737—In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.php. NOTE: the softwarEPSS 8.5%CVE-2015-0848—Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary codeEPSS 8.5%