Vulnerabilidades en n/a
161.279 resultadosCVE-2021-44593—Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the usernamEPSS 4.3%CVE-2019-18643—Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only protectionEPSS 4.3%CVE-2016-5740—An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical attachments within schedEPSS 4.3%CVE-2011-3503—Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackerEPSS 4.3%CVE-2011-0868—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers EPSS 4.3%CVE-2012-4875—Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote aEPSS 4.3%CVE-2002-1480—Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pageEPSS 4.3%CVE-2012-5006—Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remEPSS 4.3%CVE-2009-2064—Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses httpsEPSS 4.3%CVE-2002-0676—SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to executEPSS 4.3%CVE-2015-8731—The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x beforeEPSS 4.3%CVE-2013-0710—Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document.EPSS 4.3%CVE-2013-2691—Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2EPSS 4.3%CVE-2014-2262—Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attaEPSS 4.3%CVE-2006-2549—Stack-based buffer overflow in PDF Form Filling and Flattening Tool before 3.1.0.12 allows remote attackers to cause a denial of service (crEPSS 4.3%CVE-2019-10651—An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote codeEPSS 4.3%CVE-2017-15268—Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-weEPSS 4.3%CVE-2009-1373—Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbEPSS 4.3%CVE-2015-3216—Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in opEPSS 4.3%CVE-2017-2445—An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affectedEPSS 4.3%