Vulnerabilidades en N/A
161.455 resultadosCVE-2016-5259—Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 alEPSS 3.3%CVE-2019-17544—libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ charEPSS 3.3%CVE-2014-6504—Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiaEPSS 3.3%CVE-2015-2798—SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the EPSS 3.3%CVE-2015-8954—The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackerEPSS 3.3%CVE-2008-3211—Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by settingEPSS 3.3%CVE-2009-3767—libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' characEPSS 3.3%CVE-2018-15557—An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. An attacker can statically set his/EPSS 3.3%CVE-2018-15556—The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty pEPSS 3.3%CVE-2008-5042—Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct requesEPSS 3.3%CVE-2022-29347—An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.EPSS 3.3%CVE-2010-2018—Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrary files via a .. (doEPSS 3.3%CVE-2008-4510—Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service (page fault and system craEPSS 3.3%CVE-2017-20005CRITICALNGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 thatEPSS 3.3%CVE-2004-0408—Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.EPSS 3.3%CVE-2020-22874—Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code.EPSS 3.3%CVE-2020-22875—Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code.EPSS 3.3%CVE-2017-7703—In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. EPSS 3.3%CVE-2001-1107—SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the serEPSS 3.3%CVE-2001-1194—Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length lesEPSS 3.3%