Vulnerabilidades en N/A
161.028 resultadosCVE-2025-27225HIGHTRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users. TEPSS 18.4%CVE-2007-6335—Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, whicEPSS 18.4%CVE-2016-6855—Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remoEPSS 18.4%CVE-2015-5345—The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects bEPSS 18.4%CVE-2022-25089—Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasksEPSS 18.4%CVE-2002-1291—The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares viEPSS 18.4%CVE-2007-1071—Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (seEPSS 18.4%CVE-2010-5312—Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to iEPSS 18.4%CVE-2022-38916CRITICALA file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious filesEPSS 18.3%CVE-2016-3368—Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1EPSS 18.3%CVE-2016-0188—The User Mode Code Integrity (UMCI) implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a codEPSS 18.3%CVE-2020-10214—An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an autheEPSS 18.3%CVE-2006-0031—Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted aEPSS 18.3%CVE-2018-4071—An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLinEPSS 18.3%CVE-2011-1018—logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrEPSS 18.3%CVE-2025-60689MEDIUMAn unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (FirmwarEPSS 18.3%CVE-2013-1839—The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denEPSS 18.3%CVE-2019-7670—Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OSEPSS 18.3%CVE-2012-0168—Microsoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document that is EPSS 18.3%CVE-1999-1132—Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information EPSS 18.3%