Vulnerabilities in n/a
161,188 resultsCVE-2022-22955—VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A mEPSS 7.8%CVE-2018-0172HIGHA vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticEPSS 7.8%KEVCVE-2007-2611—Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the patEPSS 7.8%CVE-2001-1382—The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriEPSS 7.8%CVE-2012-3816—WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.EPSS 7.8%CVE-2004-0628—Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly EPSS 7.8%CVE-2005-3293—Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory conteEPSS 7.8%CVE-2015-2155—The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vEPSS 7.8%CVE-2006-1614—Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMEPSS 7.8%CVE-2007-1471—admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request fEPSS 7.8%CVE-2015-1986—The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified veEPSS 7.8%CVE-2008-6178—Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4EPSS 7.8%CVE-2008-1488—Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code EPSS 7.8%CVE-2000-0688—Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privilEPSS 7.8%CVE-2000-0689—Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain priEPSS 7.8%CVE-2012-3400—Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers toEPSS 7.8%CVE-2019-19142—Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.EPSS 7.8%CVE-2006-4788—PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals iEPSS 7.8%CVE-2005-3399—Multiple interpretation error in CAT-QuickHeal 8.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML wiEPSS 7.8%CVE-2008-0003—Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compEPSS 7.8%