Vulnerabilidades en N/A

161.398 resultados
CVE-2007-0187—F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a trailing null byte, (2) multiple leading sEPSS 3.8%CVE-2013-2116—The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buEPSS 3.8%CVE-2000-0629—The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading JavaEPSS 3.8%CVE-2007-2118—Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors, aEPSS 3.8%CVE-2015-6467—Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin.EPSS 3.8%CVE-2021-28658—In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suEPSS 3.8%CVE-2006-5660—Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remoteEPSS 3.8%CVE-2007-6627—Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denEPSS 3.8%CVE-2008-5810—WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arEPSS 3.8%CVE-2005-0467—Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, anEPSS 3.8%CVE-2011-1914—Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPEPSS 3.8%CVE-2015-3933—Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to executeEPSS 3.8%CVE-2020-28495HIGHPrototype PollutionEPSS 3.8%CVE-2009-1780—admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote atEPSS 3.8%CVE-2014-1209—VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allowEPSS 3.8%CVE-2017-17833—OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-seEPSS 3.8%CVE-2014-3741—The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbitEPSS 3.8%CVE-2020-11976—By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly senEPSS 3.8%CVE-2008-2726—Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 beforeEPSS 3.8%CVE-2007-4188—Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspEPSS 3.8%