Vulnerabilities in n/a
161,457 resultsCVE-2002-0950—Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain eEPSS 2.7%CVE-2005-0567—Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying theEPSS 2.7%CVE-2010-1212—js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers tEPSS 2.7%CVE-2007-0353—Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary wEPSS 2.7%CVE-2015-5741—The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduEPSS 2.7%CVE-2008-4625—SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to eEPSS 2.7%CVE-2014-9422—The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2EPSS 2.7%CVE-2016-4967—Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of EPSS 2.7%CVE-2016-6727—The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.EPSS 2.7%CVE-2020-13977—Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify thEPSS 2.7%CVE-2013-4340—wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the AEPSS 2.7%CVE-2006-0731—WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks viaEPSS 2.7%CVE-2000-1238—BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servletEPSS 2.7%CVE-2018-20809—A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure EPSS 2.7%CVE-2013-4179—The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to caEPSS 2.7%CVE-2019-15931—Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.EPSS 2.7%CVE-2018-20352—Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlieEPSS 2.7%CVE-2009-2813—Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.EPSS 2.7%CVE-2017-15281—ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly havEPSS 2.7%CVE-2014-8959—Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x beforeEPSS 2.7%