Vulnerabilities in n/a
161,281 resultsCVE-2004-0358—Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other usEPSS 4.2%CVE-2003-1197—Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web scEPSS 4.2%CVE-2018-7538—A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to eEPSS 4.2%CVE-2017-9389—An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user toEPSS 4.2%CVE-2015-2709—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of servicEPSS 4.2%CVE-2016-6520—Buffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to have unspecified impact via vectors relatedEPSS 4.2%CVE-2003-1187—Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script oEPSS 4.2%CVE-2016-8606—The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.EPSS 4.2%CVE-2004-0301—Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id paEPSS 4.2%CVE-2016-3616—The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or executEPSS 4.2%CVE-2010-0888—Unspecified vulnerability in the Sun Ray Server Software component in Oracle Sun Product Suite 4.0, 4.1, and 4.2 allows remote attackers to EPSS 4.2%CVE-2009-1992—Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect cEPSS 4.2%CVE-2007-6414—admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote attackersEPSS 4.2%CVE-2014-3488—The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted EPSS 4.2%CVE-2020-7630—git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.EPSS 4.2%CVE-2009-3312—PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is enabled, allows remoEPSS 4.2%CVE-2020-7624—effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument.EPSS 4.2%CVE-2020-7629—install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.EPSS 4.2%CVE-2020-7625—op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.EPSS 4.2%CVE-2020-7627—node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument inEPSS 4.2%