Vulnerabilities in n/a

161,455 results
CVE-2011-4508—The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, EPSS 3.0%CVE-2007-5236—Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce acceEPSS 3.0%CVE-2017-17586—FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.EPSS 3.0%CVE-2015-5145—validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified EPSS 3.0%CVE-2017-17583—FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.EPSS 3.0%CVE-2017-17580—FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.EPSS 3.0%CVE-2017-17579—FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.EPSS 3.0%CVE-2017-17584—FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.EPSS 3.0%CVE-2017-17581—FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.EPSS 3.0%CVE-2007-5113—report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain EPSS 3.0%CVE-2017-17572—FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.EPSS 3.0%CVE-2019-13651—TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5).EPSS 3.0%CVE-2017-17643—FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.EPSS 3.0%CVE-2013-0135—Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parametEPSS 3.0%CVE-2017-17575—FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.EPSS 3.0%CVE-2020-13164—In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packEPSS 3.0%CVE-2012-3365—The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectorEPSS 3.0%CVE-2017-17577—FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.EPSS 3.0%CVE-2017-17574—FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.EPSS 3.0%CVE-2017-17571—FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.EPSS 3.0%