Vulnerabilidades en N/A
161.272 resultadosCVE-2016-9137—Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remoteEPSS 5.3%CVE-2007-1473—Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a languaEPSS 5.3%CVE-2006-3462—Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to exeEPSS 5.3%CVE-2006-3461—Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to exeEPSS 5.3%CVE-2010-3004—Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vectoEPSS 5.3%CVE-2019-6804—An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditoEPSS 5.3%CVE-2014-4607—Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers toEPSS 5.3%CVE-2009-3179—Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via EPSS 5.3%CVE-2012-6506—Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbiEPSS 5.3%CVE-2023-36306—A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code vEPSS 5.3%CVE-2010-1523—Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to exEPSS 5.3%CVE-2020-26693—A stored cross-site scripting (XSS) vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitEPSS 5.3%CVE-2020-29659—A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by EPSS 5.3%CVE-2009-1705—CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allowsEPSS 5.3%CVE-2014-8888—The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary comEPSS 5.3%CVE-2015-8869—OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain senEPSS 5.3%CVE-2024-30896CRITICALInfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with rEPSS 5.3%CVE-2020-25206—The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyEPSS 5.3%CVE-2011-2419—IML32.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memoryEPSS 5.3%CVE-2011-2982—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkeEPSS 5.3%