Vulnerabilidades en N/A

161.272 resultados
CVE-2020-27160—Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devEPSS 4.9%CVE-2011-4788—Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbEPSS 4.9%CVE-2005-2969—The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING optioEPSS 4.9%CVE-2010-2099—bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which EPSS 4.9%CVE-2013-4092—The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain senEPSS 4.9%CVE-2020-11732—The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.EPSS 4.9%CVE-2020-10238—An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potentiaEPSS 4.9%CVE-2009-1469—CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9EPSS 4.9%CVE-2006-0270—Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impacEPSS 4.9%CVE-2016-1247—The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuEPSS 4.9%CVE-2005-1374—Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote atEPSS 4.9%CVE-2009-2992—An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properlEPSS 4.9%CVE-2015-0272—GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 RouteEPSS 4.9%CVE-2007-1393—PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL iEPSS 4.9%CVE-2006-1413—Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script oEPSS 4.9%CVE-2020-16845—Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.EPSS 4.9%CVE-2009-0188—Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicatiEPSS 4.9%CVE-2017-3073—Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties oEPSS 4.9%CVE-2020-36518HIGHjackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.EPSS 4.9%CVE-2007-0452—smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming aEPSS 4.9%