Vulnerabilidades en N/A
161.457 resultadosCVE-2018-20622MEDIUMJasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.EPSS 2.9%CVE-2019-7225—The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credEPSS 2.9%CVE-2016-1468—The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to exeEPSS 2.9%CVE-2016-0769—Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execuEPSS 2.9%CVE-2006-0735—Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1EPSS 2.9%CVE-2000-0546—Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey EPSS 2.9%CVE-2000-0547—Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4EPSS 2.9%CVE-2006-5868—Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors viaEPSS 2.9%CVE-2020-27227CRITICALAn exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to bEPSS 2.9%CVE-2019-13578—A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerabEPSS 2.9%CVE-2016-0278—Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackEPSS 2.9%CVE-2016-1857—WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or EPSS 2.9%CVE-2015-8985—The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (asserEPSS 2.9%CVE-2017-17042—lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attacEPSS 2.9%CVE-2018-15882—An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files toEPSS 2.9%CVE-2006-7130—PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute EPSS 2.9%CVE-2010-1753—ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (mEPSS 2.9%CVE-2004-0693—The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformedEPSS 2.9%CVE-2019-18929—Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a doEPSS 2.9%CVE-2016-6380—The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitiEPSS 2.9%