Vulnerabilities in n/a
161,455 resultsCVE-2009-1710—WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and EPSS 3.2%CVE-2021-31909—In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.EPSS 3.2%CVE-2012-3523—The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers EPSS 3.2%CVE-2007-4843—Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitEPSS 3.2%CVE-2017-15645—CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker to execute arbitrarEPSS 3.2%CVE-2020-16206—The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain acEPSS 3.2%CVE-2020-16210—The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perEPSS 3.2%CVE-2015-8916—bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," whiEPSS 3.2%CVE-2014-8711—Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.EPSS 3.2%CVE-2013-3082—Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote attackers to inject arbEPSS 3.2%CVE-2011-4957—The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the EPSS 3.2%CVE-2019-13181—A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.EPSS 3.2%CVE-2006-5794—Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has EPSS 3.2%CVE-2008-4183—IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadEPSS 3.2%CVE-1999-0899—The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to sEPSS 3.2%CVE-2008-5278—Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before EPSS 3.2%CVE-2012-0851—The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x beforEPSS 3.2%CVE-2007-2019—PHP remote file inclusion vulnerability in init.gallery.php in phpGalleryScript 1.0 allows remote attackers to execute arbitrary PHP code viEPSS 3.2%CVE-2018-17126—CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.EPSS 3.2%CVE-2016-10707—jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any attribute getter usiEPSS 3.2%