Vulnerabilidades en N/A
161.457 resultadosCVE-2000-1086—The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of aEPSS 2.8%CVE-2005-1464—Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in EEPSS 2.8%CVE-2000-1087—The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of aEPSS 2.8%CVE-2007-5306—ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information (full path) via unspecified vectors to utilisateurs/votesresultaEPSS 2.8%CVE-2000-1084—The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer EPSS 2.8%CVE-2009-1348—The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security foEPSS 2.8%CVE-2000-1082—The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a bufferEPSS 2.8%CVE-2006-5831—PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackEPSS 2.8%CVE-2007-5742—Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attaEPSS 2.8%CVE-2014-0664—The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP cEPSS 2.8%CVE-2016-6211—The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom cEPSS 2.8%CVE-2021-43295—Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module.EPSS 2.8%CVE-2009-3149—Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary fEPSS 2.8%CVE-2009-0591—The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed sigEPSS 2.8%CVE-2017-12588—The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format striEPSS 2.8%CVE-2013-2623—Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "f_email" parameterEPSS 2.8%CVE-2006-5621—PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arEPSS 2.8%CVE-2005-0345—viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protecteEPSS 2.8%CVE-2011-4671—SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allowsEPSS 2.8%CVE-2017-5953—vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overfEPSS 2.8%