Vulnerabilidades en N/A

161.272 resultados
CVE-1999-1233—IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS EPSS 5.5%CVE-2022-34918—An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could bEPSS 5.5%CVE-2005-2246—Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path EPSS 5.5%CVE-2007-1452—The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackerEPSS 5.5%CVE-2008-3821—Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitEPSS 5.4%CVE-2022-45063—xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command executioEPSS 5.4%CVE-2002-1089—rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remoteEPSS 5.4%CVE-2015-7673—io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of servicEPSS 5.4%CVE-2011-0074—Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, aEPSS 5.4%CVE-2009-3364—Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV comEPSS 5.4%CVE-2002-1632—Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other senEPSS 5.4%CVE-2011-0078—Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, aEPSS 5.4%CVE-2011-0075—Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, aEPSS 5.4%CVE-2011-0077—Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, aEPSS 5.4%CVE-2011-0072—Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, aEPSS 5.4%CVE-2010-4092—Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remoEPSS 5.4%CVE-2007-3844—Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scriptinEPSS 5.4%CVE-2016-4167—Adobe DNG Software Development Kit (SDK) before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service (memory corEPSS 5.4%CVE-2016-10940—The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.EPSS 5.4%CVE-2016-5689—The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack ofEPSS 5.4%