Vulnerabilities in n/a
161,455 resultsCVE-2017-17618—Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.EPSS 3.0%CVE-2017-17595—Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.EPSS 3.0%CVE-2017-17594—DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.EPSS 3.0%CVE-2017-17598—Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.EPSS 3.0%CVE-2020-9487—In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a reqEPSS 3.0%CVE-2016-9113—There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a valEPSS 3.0%CVE-2017-17600—Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.EPSS 3.0%CVE-2017-17602—Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.EPSS 3.0%CVE-2018-6024—SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.EPSS 3.0%CVE-2017-17601—Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.EPSS 3.0%CVE-2018-6367—SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_eEPSS 3.0%CVE-2018-6364—SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.EPSS 3.0%CVE-2017-9346—In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectorEPSS 3.0%CVE-2017-17616—Event Search Script 1.0 has SQL Injection via the /event-list city parameter.EPSS 3.0%CVE-2008-1862—ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackerEPSS 3.0%CVE-2014-0792—Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectoEPSS 3.0%CVE-2021-30124—The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitraEPSS 3.0%CVE-2005-2712—The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (craEPSS 3.0%CVE-2012-6084—modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during serEPSS 3.0%CVE-2004-0905—Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domainEPSS 3.0%