Vulnerabilidades en N/A
161.455 resultadosCVE-2008-5840—PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies tEPSS 3.0%CVE-2017-6925—In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, EPSS 3.0%CVE-2007-3556—Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloaEPSS 3.0%CVE-2007-2780—PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invaliEPSS 3.0%CVE-2011-4357—Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 anEPSS 3.0%CVE-2016-2828—Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary coEPSS 3.0%CVE-2010-3708—The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.EPSS 3.0%CVE-2002-0366—Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows loEPSS 3.0%CVE-2007-3790—The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial of service via a longEPSS 3.0%CVE-2008-1002—Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a craEPSS 3.0%CVE-2019-13172—Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie oEPSS 3.0%CVE-2009-3962—The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5.29.52 allows remote EPSS 3.0%CVE-2016-4158—Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gaiEPSS 3.0%CVE-2019-6986—SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular exprEPSS 3.0%CVE-2006-2402—Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote attackers to change theEPSS 3.0%CVE-2007-2131—Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectorsEPSS 3.0%CVE-2023-27032CRITICALPrestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::EPSS 3.0%CVE-2014-4984—Déjà Vu Crescendo Sales CRM has remote SQL InjectionEPSS 3.0%CVE-2006-0553—PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" usiEPSS 3.0%CVE-2020-29576—The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deplEPSS 3.0%