Vulnerabilidades en N/A
161.399 resultadosCVE-2005-1153—Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascriEPSS 3.6%CVE-2018-19789—An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, andEPSS 3.6%CVE-2014-4351—Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (applEPSS 3.6%CVE-2015-9414—The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.EPSS 3.6%CVE-2020-28493MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 3.6%CVE-2020-10969HIGHFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEPSS 3.6%CVE-2020-12663—Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.EPSS 3.6%CVE-2019-9195—util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP arEPSS 3.6%CVE-2004-0916—Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containinEPSS 3.6%CVE-2007-0539—The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) EPSS 3.6%CVE-2004-1207—The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second EncountEPSS 3.6%CVE-2021-39501—EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.EPSS 3.6%CVE-2014-8567—The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logoutEPSS 3.6%CVE-2016-3518—Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related toEPSS 3.6%CVE-2001-1114—book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.EPSS 3.6%CVE-2014-4979—Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version nEPSS 3.6%CVE-2020-7623—jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.EPSS 3.6%CVE-2013-2512—The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command arguEPSS 3.6%CVE-2016-9180—perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. ExternaEPSS 3.6%CVE-2013-4118—FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspeciEPSS 3.6%