Vulnerabilities in N/A
161,457 resultsCVE-2017-9516—Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.EPSS 2.8%CVE-2009-2664—The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause EPSS 2.8%CVE-2008-3458—Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to rEPSS 2.8%CVE-2007-4330—PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in tEPSS 2.8%CVE-2001-0163—Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connEPSS 2.8%CVE-2020-6948—A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.EPSS 2.8%CVE-2014-4480—Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access EPSS 2.8%CVE-2005-2257—The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_EPSS 2.8%CVE-2009-1107—The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,EPSS 2.8%CVE-2006-2947—Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified memEPSS 2.8%CVE-2012-5482—The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protecEPSS 2.8%CVE-2007-6397—Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (1) create arbitrary fEPSS 2.8%CVE-2005-2870—Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via cEPSS 2.8%CVE-2007-5173—PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute EPSS 2.8%CVE-2007-2007—admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.EPSS 2.8%CVE-2014-1869—Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and JamesEPSS 2.8%CVE-2015-3808—The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zeEPSS 2.8%CVE-2014-3308—Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of serviEPSS 2.8%CVE-2015-1800—The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitiveEPSS 2.8%CVE-2013-6422—The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables tEPSS 2.8%