Vulnerabilities in n/a

161,276 results
CVE-2015-2090—SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows rEPSS 4.6%CVE-2006-3892—The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which allowEPSS 4.6%CVE-2014-10013—SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQEPSS 4.6%CVE-2014-5189—SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrarEPSS 4.6%CVE-2014-9175—SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to executEPSS 4.6%CVE-2003-0154—Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) tEPSS 4.6%CVE-2011-1431—The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O EPSS 4.6%CVE-2004-2512—CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attaEPSS 4.6%CVE-2015-1329—Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to EPSS 4.6%CVE-2014-3579—XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via veEPSS 4.6%CVE-2000-0480—Dragon telnet server allows remote attackers to cause a denial of service via a long username.EPSS 4.6%CVE-2008-0985—Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers toEPSS 4.6%CVE-2005-4449—verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arEPSS 4.6%CVE-2014-9224—Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec CriticEPSS 4.6%CVE-2010-0209—Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or causEPSS 4.6%CVE-2004-1957—Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via theEPSS 4.6%CVE-2010-2214—Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or causEPSS 4.6%CVE-2010-2213—Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or causEPSS 4.6%CVE-2010-2216—Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or causEPSS 4.6%CVE-2007-1681—Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a deniEPSS 4.6%