Vulnerabilidades en N/A
161.457 resultadosCVE-2010-3475—IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remoEPSS 2.8%CVE-2021-44537—ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code executEPSS 2.8%CVE-2016-9447—The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) anEPSS 2.8%CVE-2016-3728—Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows rEPSS 2.8%CVE-2002-1886—TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain theEPSS 2.8%CVE-2021-33790—The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as pEPSS 2.8%CVE-2004-2374—BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes theEPSS 2.8%CVE-2018-9261—In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overfloEPSS 2.8%CVE-2016-10711—Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.EPSS 2.8%CVE-2008-5980—Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers tEPSS 2.8%CVE-2009-2689—JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of uEPSS 2.8%CVE-2014-9032—Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows rEPSS 2.8%CVE-2008-0657—Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlieEPSS 2.8%CVE-2015-2075—SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP EPSS 2.8%CVE-2004-1786—PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensiEPSS 2.8%CVE-2005-3503—chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS fielEPSS 2.8%CVE-2002-0970—The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, wEPSS 2.8%CVE-2024-36622CRITICALIn RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to EPSS 2.8%CVE-2006-2678—Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML viEPSS 2.8%CVE-2021-38714—In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found iEPSS 2.8%