Vulnerabilities in N/A

161,456 results
CVE-2013-0135—Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parametEPSS 3.0%CVE-2017-17578—FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.EPSS 3.0%CVE-2017-17587—FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c pEPSS 3.0%CVE-2017-17576—FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php sEPSS 3.0%CVE-2007-5236—Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce acceEPSS 3.0%CVE-2017-17586—FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.EPSS 3.0%CVE-2017-17625—Professional Service Script 1.0 has SQL Injection via the service-list city parameter.EPSS 3.0%CVE-2007-5113—report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain EPSS 3.0%CVE-2018-6363—SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.EPSS 3.0%CVE-2017-17589—FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.EPSS 3.0%CVE-2023-36053HIGHIn Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regulaEPSS 3.0%CVE-2020-13164—In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packEPSS 3.0%CVE-2012-3365—The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectorEPSS 3.0%CVE-2017-17571—FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.EPSS 3.0%CVE-2017-6199—A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field.EPSS 3.0%CVE-2002-1488—The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) via a PART message withEPSS 3.0%CVE-2017-15670—The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob functionEPSS 3.0%CVE-2002-2227—Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted SSLv2 cEPSS 3.0%CVE-2006-4464—The Nokia Browser, possibly Nokia Symbian 60 Browser 3rd edition, allows remote attackers to cause a denial of service (crash) via JavaScripEPSS 3.0%CVE-2006-3496—AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service (crash) via an invalid AFP request that trEPSS 3.0%