Vulnerabilidades en N/A
161.457 resultadosCVE-2020-6115HIGHAn exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. WhEPSS 2.7%CVE-2019-13308—ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.EPSS 2.7%CVE-2021-46063—MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.EPSS 2.7%CVE-2004-0294—YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid usEPSS 2.7%CVE-2005-2430—Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) EPSS 2.7%CVE-1999-0754—The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmentaEPSS 2.7%CVE-2005-2769—Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web scriEPSS 2.7%CVE-2019-14249—dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file withEPSS 2.7%CVE-2018-18073—Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved executEPSS 2.7%CVE-2013-4282—Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial ofEPSS 2.7%CVE-2017-15379—An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.EPSS 2.7%CVE-2016-2530—The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x beforEPSS 2.7%CVE-2021-3210—components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands whEPSS 2.7%CVE-2017-9429—SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via EPSS 2.7%CVE-2018-16336—Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) vEPSS 2.7%CVE-2015-5917—The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of serEPSS 2.7%CVE-2016-4729—WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory coEPSS 2.7%CVE-2015-2701—Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests EPSS 2.7%CVE-2018-10753—Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial oEPSS 2.7%CVE-2012-0024—MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisionEPSS 2.7%