Vulnerabilidades en N/A

161.457 resultados
CVE-2019-9144—An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggEPSS 2.8%CVE-2021-22765CRITICALA CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All VersionsEPSS 2.8%CVE-2021-21877CRITICALSpecially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests EPSS 2.8%CVE-2021-46361—An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary codEPSS 2.8%CVE-2007-2471—Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pEPSS 2.8%CVE-2007-6056—frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task details via modified EPSS 2.8%CVE-2015-7097—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2013-1859—The Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the configuration options, which allows remote attEPSS 2.8%CVE-2021-42782—Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the liEPSS 2.8%CVE-2021-37348—Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php.EPSS 2.8%CVE-2012-2977—The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted inputEPSS 2.8%CVE-2010-0984—Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackerEPSS 2.8%CVE-2015-7102—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2010-4372—Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to imprEPSS 2.8%CVE-2015-7048—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2015-7096—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2015-7098—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2015-5794—WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of serviceEPSS 2.8%CVE-2015-7099—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2015-7103—WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denialEPSS 2.8%