Vulnerabilities in N/A
161,457 resultsCVE-2008-4625—SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to eEPSS 2.7%CVE-2016-5354—The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a dEPSS 2.7%CVE-2013-6744—The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authentEPSS 2.7%CVE-2015-5741—The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduEPSS 2.7%CVE-2005-0567—Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying theEPSS 2.7%CVE-2020-21785—In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.EPSS 2.7%CVE-2013-4340—wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the AEPSS 2.7%CVE-2020-13977—Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify thEPSS 2.7%CVE-2020-5763—Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtEPSS 2.7%CVE-2002-1062—Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code viaEPSS 2.7%CVE-2018-17097—The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) orEPSS 2.7%CVE-2015-2739—The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird bEPSS 2.7%CVE-2017-15281—ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly havEPSS 2.7%CVE-2013-4179—The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to caEPSS 2.7%CVE-2018-20352—Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlieEPSS 2.7%CVE-2015-4204—Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause EPSS 2.7%CVE-2019-15931—Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.EPSS 2.7%CVE-2018-20809—A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure EPSS 2.7%CVE-2006-0731—WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks viaEPSS 2.7%CVE-2000-1238—BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servletEPSS 2.7%