Vulnerabilities in N/A
161,455 resultsCVE-2012-6651—Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary filEPSS 3.2%CVE-2014-100017—Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbitrary web script or HTEPSS 3.2%CVE-2015-8935—The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line foldinEPSS 3.2%CVE-1999-0498—TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.EPSS 3.2%CVE-2014-2586—Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbiEPSS 3.2%CVE-2015-1478—Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitEPSS 3.2%CVE-2014-1603—Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML viaEPSS 3.2%CVE-2014-6619—Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 allow remote attackerEPSS 3.2%CVE-2012-5684—Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via theEPSS 3.2%CVE-2013-5312—Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HEPSS 3.2%CVE-2020-15958—An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attackeEPSS 3.2%CVE-2014-4166—Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject arbitrary web script EPSS 3.2%CVE-2014-9349—Multiple cross-site scripting (XSS) vulnerabilities in admin/robots.lib.php in RobotStats 1.0 allow remote attackers to inject arbitrary webEPSS 3.2%CVE-2013-6793—Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote attackers to inject aEPSS 3.2%CVE-2014-9580—Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary web script or HTML EPSS 3.2%CVE-2012-2519—Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 EPSS 3.2%CVE-2014-8469—Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attackers to inject arbitrarEPSS 3.2%CVE-2013-3639—Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or EPSS 3.2%CVE-2017-17499—ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.EPSS 3.2%CVE-2008-0372—8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmenEPSS 3.2%