Vulnerabilidades en N/A
161.457 resultadosCVE-2020-6948—A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.EPSS 2.8%CVE-2008-3458—Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to rEPSS 2.8%CVE-2009-2664—The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause EPSS 2.8%CVE-2009-1107—The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,EPSS 2.8%CVE-2017-9516—Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.EPSS 2.8%CVE-2012-0031—scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdownEPSS 2.8%CVE-2014-4480—Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access EPSS 2.8%CVE-2001-0163—Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connEPSS 2.8%CVE-2015-4418—Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for reEPSS 2.8%CVE-2015-5410—HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of sEPSS 2.8%CVE-2010-3493—Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of EPSS 2.8%CVE-2011-3845—Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackEPSS 2.8%CVE-2004-2403—Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the adminEPSS 2.8%CVE-2001-0733—The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinEPSS 2.8%CVE-2013-1998—Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitraEPSS 2.8%CVE-2007-2007—admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.EPSS 2.8%CVE-2014-1869—Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and JamesEPSS 2.8%CVE-2007-5173—PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute EPSS 2.8%CVE-2015-1800—The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitiveEPSS 2.8%CVE-2014-3308—Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of serviEPSS 2.8%