Vulnerabilidades en n/a
161.281 resultadosCVE-2018-8955—The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which alEPSS 4.3%CVE-2006-0789—Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an adminiEPSS 4.3%CVE-2007-6544—Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameterEPSS 4.3%CVE-2006-1627—Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform pEPSS 4.3%CVE-2019-15530—An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with AuthentiEPSS 4.3%CVE-2020-6086HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENTEPSS 4.3%CVE-2016-7969—The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds reEPSS 4.3%CVE-2020-6085HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 4.3%CVE-2002-1708—Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecEPSS 4.3%CVE-2020-8884—rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated uEPSS 4.3%CVE-2019-19943—The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large hoEPSS 4.3%CVE-2020-0198—In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial EPSS 4.3%CVE-2021-46416MEDIUMInsecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecurEPSS 4.3%CVE-2016-1669—The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine EPSS 4.3%CVE-2021-34813—Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room EPSS 4.3%CVE-2002-1727—Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to exEPSS 4.3%CVE-2016-5040—libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a cEPSS 4.3%CVE-2016-5044—The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-EPSS 4.3%CVE-2016-5043—The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) vEPSS 4.3%CVE-2003-1516—The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, whiEPSS 4.3%