Vulnerabilidades en n/a

161.284 resultados
CVE-2015-0973HIGHBuffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent atEPSS 4.1%CVE-2015-3415—The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependeEPSS 4.1%CVE-2016-9427—Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow EPSS 4.1%CVE-2015-3414—SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to causeEPSS 4.1%CVE-2007-6307—Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web scriptEPSS 4.1%CVE-2013-4526—Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary coEPSS 4.1%CVE-2014-3465—The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cauEPSS 4.1%CVE-2006-5240—PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enabled, allows remote atEPSS 4.1%CVE-2004-2534—Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD requestEPSS 4.1%CVE-2015-8739—The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to EPSS 4.1%CVE-2016-2160—Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing EPSS 4.1%CVE-2020-28021—Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into EPSS 4.1%CVE-2011-4449—actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typiEPSS 4.1%CVE-2007-1483—Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in tEPSS 4.1%CVE-2006-5019—Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /search with an invaliEPSS 4.1%CVE-2015-8735—The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uEPSS 4.1%CVE-2011-3256—FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows reEPSS 4.1%CVE-2018-7539—On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request (such aEPSS 4.1%CVE-2010-0833—The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 NetwoEPSS 4.1%CVE-2018-6376—In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postEPSS 4.1%