Vulnerabilidades en n/a

161.292 resultados
CVE-2016-6317—Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record cEPSS 3.9%CVE-2019-5722—An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various EPSS 3.9%CVE-2016-7983—The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().EPSS 3.9%CVE-2016-4708—CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remoEPSS 3.9%CVE-2009-4146—The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD EPSS 3.9%CVE-2016-7791—Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an evil 'exploit.tar.gz'EPSS 3.9%CVE-2007-0496—PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to execute arbiEPSS 3.9%CVE-2019-8923—XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.EPSS 3.9%CVE-2016-7790—Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the websitEPSS 3.9%CVE-2005-0843—CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the bodyEPSS 3.9%CVE-2006-5241—Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is enabled, allow remote EPSS 3.9%CVE-2017-8361—The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and appliEPSS 3.9%CVE-1999-1455—RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comeEPSS 3.9%CVE-2010-2657—Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a webEPSS 3.9%CVE-2020-6584—Nagios Log Server 2.1.3 has Incorrect Access Control.EPSS 3.9%CVE-2014-4536—Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity FormsEPSS 3.9%CVE-1999-1316—Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker tEPSS 3.9%CVE-2015-5041—The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows EPSS 3.9%CVE-2023-36619—Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users.EPSS 3.9%CVE-2009-1416—lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, whEPSS 3.9%