Vulnerabilidades en N/A

161.455 resultados
CVE-2009-1889—The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which alloEPSS 3.4%CVE-2014-1592—Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, TEPSS 3.4%CVE-2005-1141—Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitraryEPSS 3.4%CVE-2010-0441—Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, EPSS 3.4%CVE-2008-2665—Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictEPSS 3.4%CVE-2004-1539—Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game servEPSS 3.4%CVE-2006-5192—PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHEPSS 3.4%CVE-2021-21996—An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file systeEPSS 3.4%CVE-2008-2932—Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly executEPSS 3.4%CVE-2018-1000537—Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) thEPSS 3.4%CVE-2019-20204—The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVEPSS 3.4%CVE-2019-15304—Lierda Grill Temperature Monitor V1.00_50006 has a default password of admin for the admin account, which allows an attacker to cause a DeniEPSS 3.4%CVE-2008-5277—PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query.EPSS 3.4%CVE-2020-7707CRITICALPrototype PollutionEPSS 3.4%CVE-2007-1144—Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via aEPSS 3.4%CVE-2009-0363—Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involvEPSS 3.4%CVE-2007-1063—The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-codeEPSS 3.4%CVE-2014-6427—Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before EPSS 3.4%CVE-2024-24112CRITICALxmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.EPSS 3.4%CVE-2021-42260—TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggereEPSS 3.4%