Vulnerabilidades en N/A

161.276 resultados
CVE-2006-0171—PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in theEPSS 4.5%CVE-2009-1204—Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTMLEPSS 4.5%CVE-2023-24217HIGHAgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability.EPSS 4.5%CVE-2006-0710—Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP reEPSS 4.5%CVE-2001-0527—DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlinesEPSS 4.5%CVE-2009-4274—Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of seEPSS 4.5%CVE-2012-0442—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 aEPSS 4.5%CVE-2010-0829—Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crEPSS 4.5%CVE-2002-0311—Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell mEPSS 4.5%CVE-2021-22946HIGHA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqEPSS 4.5%CVE-2020-10735MEDIUMA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could takeEPSS 4.5%CVE-2012-3158—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers EPSS 4.5%CVE-2020-7995—The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.EPSS 4.5%CVE-2020-29651—A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to EPSS 4.5%CVE-2016-6147—An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unEPSS 4.5%CVE-2006-4013—Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connEPSS 4.5%CVE-2015-0003—win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7EPSS 4.5%CVE-2014-4942—The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct requesEPSS 4.5%CVE-2018-6476—In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not vEPSS 4.5%CVE-2014-6456—Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability viaEPSS 4.5%