Vulnerabilities in n/a
161,281 resultsCVE-2002-0608—Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.EPSS 4.3%CVE-2020-28035—WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.EPSS 4.3%CVE-2013-4539—Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arEPSS 4.3%CVE-2009-2299—The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a EPSS 4.3%CVE-2008-0939—Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to exEPSS 4.3%CVE-2017-5539—The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ..\/ tEPSS 4.3%CVE-2006-0044—Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commanEPSS 4.3%CVE-2008-1419—Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denialEPSS 4.3%CVE-2021-44716—net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/EPSS 4.3%CVE-2016-2539—Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers to hijack the authentiEPSS 4.3%CVE-2014-0862—Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x befEPSS 4.3%CVE-2009-1899—Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere ApplicationEPSS 4.3%CVE-2005-3985—The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial oEPSS 4.3%CVE-2012-2316—Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows rEPSS 4.3%CVE-2011-3850—Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web sEPSS 4.3%CVE-2018-10102—Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.EPSS 4.3%CVE-2017-6413—The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does EPSS 4.3%CVE-2015-2728—The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x beEPSS 4.3%CVE-2018-14851—exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 alloEPSS 4.3%CVE-2004-1442—Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary webEPSS 4.3%