Vulnerabilidades en N/A
161.395 resultadosCVE-2018-11242—An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartextEPSS 3.9%CVE-2016-8677—The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact vEPSS 3.9%CVE-2024-39844CRITICALIn ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.EPSS 3.9%CVE-2005-0592—Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers tEPSS 3.9%CVE-2015-6527—The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code vEPSS 3.9%CVE-2018-5005—Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead EPSS 3.9%CVE-2015-4792—Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availEPSS 3.9%CVE-2011-2691—The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a fuEPSS 3.9%CVE-2014-8634—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before EPSS 3.9%CVE-2007-2170—The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitEPSS 3.9%CVE-2008-2638—Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via theEPSS 3.9%CVE-2017-17413—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. AuthentEPSS 3.9%CVE-2005-1559—The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip paraEPSS 3.9%CVE-2020-28362—Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.EPSS 3.9%CVE-2007-5358—Multiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when using IMAP storage, might allow (1) remote atEPSS 3.9%CVE-2022-3437MEDIUMA heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES EPSS 3.9%CVE-2011-3184—The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle EPSS 3.9%CVE-2018-19595—PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an EPSS 3.9%CVE-2011-0579—Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to obtain EPSS 3.9%CVE-2014-1481—Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypaEPSS 3.9%