Vulnerabilidades en n/a
161.279 resultadosCVE-2020-7626—karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.EPSS 4.3%CVE-2017-9775—Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application EPSS 4.3%CVE-2019-8285—Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary coEPSS 4.3%CVE-2016-9165—The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure ManaEPSS 4.3%CVE-2009-3383—Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denialEPSS 4.3%CVE-2007-2136—Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting EPSS 4.3%CVE-2014-2706—Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crasEPSS 4.3%CVE-2008-6916—Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly invEPSS 4.3%CVE-2019-16693—phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.EPSS 4.3%CVE-2005-4402—Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arEPSS 4.3%CVE-2008-4795—The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackeEPSS 4.3%CVE-2013-5755—config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEEPSS 4.3%CVE-2013-7025—Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global ManagEPSS 4.3%CVE-2014-5380—Grand MA 300 allows retrieval of the access PIN from sniffed data.EPSS 4.3%CVE-2006-2550—perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executedEPSS 4.3%CVE-2019-18830—Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose theEPSS 4.3%CVE-2011-1469—Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (applEPSS 4.3%CVE-2006-6567—PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attacEPSS 4.3%CVE-2013-1944—The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allEPSS 4.3%CVE-2016-1513—The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read or write) oEPSS 4.3%