Vulnerabilidades en n/a
161.272 resultadosCVE-2019-9232—In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no adEPSS 5.1%CVE-2015-3439—Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3EPSS 5.1%CVE-2019-5599—In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attackerEPSS 5.1%CVE-2012-2104—cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted EPSS 5.1%CVE-2011-3834—Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file EPSS 5.1%CVE-2013-2450—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlierEPSS 5.1%CVE-2011-0251—Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appEPSS 5.1%CVE-2011-0250—Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appEPSS 5.1%CVE-2005-3818—Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary web script or HEPSS 5.1%CVE-2004-0150—Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arEPSS 5.1%CVE-2016-4389—The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulEPSS 5.1%CVE-2011-0252—Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appEPSS 5.1%CVE-2012-2171—SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 EPSS 5.1%CVE-2016-4388—The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulEPSS 5.1%CVE-2016-4390—The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulEPSS 5.1%CVE-2011-0249—Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appEPSS 5.1%CVE-2009-0956—Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to executEPSS 5.1%CVE-2022-23852CRITICALExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.EPSS 5.1%CVE-2018-1000136—Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 contains an improper handling of values vulnerability in WebEPSS 5.1%CVE-2012-1499—The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP rEPSS 5.1%