Vulnerabilidades en N/A
161.279 resultadosCVE-2011-3146—librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of serviceEPSS 4.4%CVE-2007-5416—Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeEPSS 4.4%CVE-2020-7242—Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the DiagnEPSS 4.4%CVE-2005-3350—libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to anEPSS 4.4%CVE-2020-28196HIGHMIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because thEPSS 4.4%CVE-2019-5611—In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3EPSS 4.4%CVE-2014-3912—Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in SaEPSS 4.4%CVE-2015-8854—The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that triEPSS 4.4%CVE-2002-0180—Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by conneEPSS 4.4%CVE-2007-2822—TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2EPSS 4.4%CVE-2015-9107—Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored deviceEPSS 4.4%CVE-2006-0099—PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/templates/categories/ PHEPSS 4.4%CVE-2008-1230—Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files viaEPSS 4.4%CVE-2016-9389—The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion faEPSS 4.4%CVE-2017-6023—An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following FaEPSS 4.4%CVE-2020-35339—In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinEPSS 4.4%CVE-2010-0185—The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which EPSS 4.4%CVE-2016-1723—WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of seEPSS 4.4%CVE-2006-5206—SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (EPSS 4.4%CVE-2019-14724—In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding deEPSS 4.4%