Vulnerabilities in N/A
161,455 resultsCVE-2015-0902—The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation EPSS 3.0%CVE-2014-2527—kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitraryEPSS 3.0%CVE-2005-1398—phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters.EPSS 3.0%CVE-2004-0412—Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.EPSS 3.0%CVE-2006-5866—Directory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier allows remote attackers to read and include arbEPSS 3.0%CVE-2015-4152—Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitEPSS 3.0%CVE-2020-19113—Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution.EPSS 3.0%CVE-2014-4338—cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by EPSS 3.0%CVE-2010-1422—WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle changEPSS 3.0%CVE-2016-7792—Ubiquiti Networks UniFi 5.2.7 does not restrict access to the database, which allows remote attackers to modify the database by directly conEPSS 3.0%CVE-2002-1887—PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code viEPSS 3.0%CVE-2008-4304—general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspeciEPSS 3.0%CVE-2016-7516—The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a cEPSS 3.0%CVE-2016-7517—The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a craEPSS 3.0%CVE-2018-0349—A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying opEPSS 3.0%CVE-2018-18933—The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a deEPSS 3.0%CVE-2010-3071—bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.EPSS 3.0%CVE-2015-4830—Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integEPSS 3.0%CVE-2015-4826—Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confiEPSS 3.0%CVE-2018-6210—D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remEPSS 3.0%