Vulnerabilidades en N/A
161.399 resultadosCVE-2020-11909CRITICALThe Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.EPSS 3.6%CVE-2019-19836—AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses EPSS 3.6%CVE-1999-1128—Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automaticallyEPSS 3.6%CVE-2011-2984—Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the droppiEPSS 3.6%CVE-2007-5608—The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allEPSS 3.6%CVE-2006-3705—Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for StatiEPSS 3.6%CVE-2021-23449CRITICALSandbox BypassEPSS 3.6%CVE-2017-10803—In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the DEPSS 3.6%CVE-2018-18066HIGHsnmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attackEPSS 3.6%CVE-2020-28911—Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fuEPSS 3.6%CVE-2012-2845—Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of sEPSS 3.6%CVE-2019-12460—Web Port 1.19.1 allows XSS via the /access/setup type parameter.EPSS 3.6%CVE-2018-19789—An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, andEPSS 3.6%CVE-2020-28493MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 3.6%CVE-2014-4351—Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (applEPSS 3.6%CVE-2008-1403—Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remotEPSS 3.6%CVE-2004-1659—Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, JourEPSS 3.6%CVE-2015-9414—The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.EPSS 3.6%CVE-2002-0399—Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary fEPSS 3.6%CVE-2009-1656—Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7EPSS 3.6%