Vulnerabilidades en N/A

161.454 resultados
CVE-2019-1000019—libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vEPSS 3.4%CVE-2007-2867—Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5EPSS 3.4%CVE-2009-1784—The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security NetzwerkEPSS 3.4%CVE-2011-3457—The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which alEPSS 3.4%CVE-2017-14648—A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an outEPSS 3.4%CVE-2015-4145—The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being proceEPSS 3.4%CVE-2008-3808—Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted EPSS 3.4%CVE-2017-12138—XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.EPSS 3.4%CVE-2012-1059—Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2EPSS 3.4%CVE-2014-1594—Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers tEPSS 3.4%CVE-2020-22001—HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header wiEPSS 3.4%CVE-2014-5109—SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitraEPSS 3.4%CVE-2016-1405—libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices beforEPSS 3.4%CVE-2014-9673—Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause aEPSS 3.4%CVE-2009-2053—Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, andEPSS 3.4%CVE-2015-4144—The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to EPSS 3.4%CVE-2013-1739—Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allEPSS 3.4%CVE-2010-4535—The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not valEPSS 3.4%CVE-2019-12165—MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2 (EPSS 3.4%CVE-2005-2148—Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to executEPSS 3.4%