Vulnerabilidades en N/A
161.284 resultadosCVE-2018-12018—The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation beEPSS 4.3%CVE-2007-6367—Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitraryEPSS 4.3%CVE-2017-5539—The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ..\/ tEPSS 4.3%CVE-2008-0939—Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to exEPSS 4.3%CVE-2020-28035—WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.EPSS 4.3%CVE-2002-0608—Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.EPSS 4.3%CVE-2021-44716—net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/EPSS 4.3%CVE-2009-1899—Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere ApplicationEPSS 4.3%CVE-2006-0044—Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commanEPSS 4.3%CVE-2008-1419—Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denialEPSS 4.3%CVE-2005-3985—The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial oEPSS 4.3%CVE-2012-2316—Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows rEPSS 4.3%CVE-2014-0862—Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x befEPSS 4.3%CVE-2016-2539—Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers to hijack the authentiEPSS 4.3%CVE-2011-3850—Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web sEPSS 4.3%CVE-2017-6413—The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does EPSS 4.3%CVE-2018-10102—Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.EPSS 4.3%CVE-2018-14851—exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 alloEPSS 4.3%CVE-2020-17383—A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the dEPSS 4.3%CVE-2017-1000410—The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest,EPSS 4.3%