Vulnerabilities in N/A
160,167 resultsCVE-2021-42127—A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execuEPSS 65.8%CVE-2010-0242—The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a deniEPSS 65.8%CVE-2019-8903—index.js in Total.js Platform before 3.2.3 allows path traversal.EPSS 65.8%CVE-2020-13548HIGHIn Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code EPSS 65.8%CVE-2004-0932—McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attacEPSS 65.8%CVE-2013-1362—Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arEPSS 65.7%CVE-2015-2295—Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remoteEPSS 65.7%CVE-2016-5675—handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETEPSS 65.7%CVE-2012-4705—Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectorsEPSS 65.7%CVE-2005-3314—Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguEPSS 65.7%CVE-2014-8636—The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that haEPSS 65.7%CVE-2006-6184—Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a dEPSS 65.7%CVE-2012-1851—Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, WiEPSS 65.6%CVE-2010-4279—The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackerEPSS 65.6%CVE-2014-8684—CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies andEPSS 65.6%CVE-2019-11542HIGHIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 anEPSS 65.6%CVE-2013-3180—Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrarEPSS 65.6%CVE-2001-1013—Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publiEPSS 65.6%CVE-2023-29489MEDIUMAn issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. TheEPSS 65.5%CVE-2019-14530—An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (tEPSS 65.5%