Vulnerabilidades en N/A
161.401 resultadosCVE-2021-40219—Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject servEPSS 3.4%CVE-2017-13045CRITICALThe VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().EPSS 3.4%CVE-2017-13690—The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.EPSS 3.4%CVE-2017-13029—The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().EPSS 3.4%CVE-2017-13030—The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.EPSS 3.4%CVE-2017-13052—The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().EPSS 3.4%CVE-2017-13025CRITICALThe IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().EPSS 3.4%CVE-2008-3509—LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, whicEPSS 3.4%CVE-2017-13021CRITICALThe ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().EPSS 3.4%CVE-2017-13023—The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().EPSS 3.4%CVE-2017-13022CRITICALThe IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().EPSS 3.4%CVE-2012-5049—APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformedEPSS 3.4%CVE-2015-7994—The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors EPSS 3.4%CVE-2018-15664—In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with DirectorEPSS 3.4%CVE-2012-2392—Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors relateEPSS 3.4%CVE-2017-17439—In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fieEPSS 3.4%CVE-2018-20752—An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifiEPSS 3.4%CVE-2008-6702—S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via a long nickname, whiEPSS 3.4%CVE-2015-4104—Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of EPSS 3.4%CVE-2003-1407—Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.EPSS 3.4%