Vulnerabilidades en N/A
161.455 resultadosCVE-2022-41318HIGHA buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB auEPSS 3.1%CVE-2010-0085—Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.EPSS 3.1%CVE-2024-46256CRITICALA Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt CertiEPSS 3.1%CVE-2004-1621—NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possiblEPSS 3.1%CVE-2012-4201—The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 1EPSS 3.1%CVE-2005-1341—Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.EPSS 3.1%CVE-2004-2588—Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sEPSS 3.1%CVE-2017-9386—An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a script file called "get_file.sh" which aEPSS 3.1%CVE-2010-3773—Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on EPSS 3.1%CVE-2023-23956MEDIUMA user can supply malicious HTML and JavaScript code that will be executed in the client browserEPSS 3.1%CVE-2001-1446—Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote aEPSS 3.1%CVE-2016-2525—epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allowEPSS 3.1%CVE-2013-4428—OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image poEPSS 3.1%CVE-2007-4706—Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file.EPSS 3.1%CVE-2020-7935—Artica Pandora FMS through 7.42 is vulnerable to remote PHP code execution because of an Unrestricted Upload Of A File With A Dangerous TypeEPSS 3.1%CVE-2010-5099—The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x beforEPSS 3.1%CVE-2012-4503—cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to EPSS 3.1%CVE-2007-4246—Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary EPSS 3.1%CVE-2021-31857—In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for noEPSS 3.1%CVE-2013-2002—Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code vEPSS 3.1%