Vulnerabilidades en n/a

161.395 resultados
CVE-2010-1391—Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari befEPSS 3.7%CVE-2006-0976—Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary fileEPSS 3.7%CVE-2014-5501—Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackeEPSS 3.7%CVE-2014-0423—Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allowsEPSS 3.7%CVE-2006-4513—Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and possibly other proEPSS 3.7%CVE-2002-0815—The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web serveEPSS 3.7%CVE-2006-7228—Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrarEPSS 3.7%CVE-2015-7196—Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of serEPSS 3.7%CVE-2018-17787—On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because thiEPSS 3.7%CVE-2005-4245—Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web scEPSS 3.7%CVE-2005-4601—The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename thEPSS 3.7%CVE-2010-2627—Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and BattEPSS 3.7%CVE-2010-1509—IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackerEPSS 3.7%CVE-2020-21994—AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a requEPSS 3.7%CVE-2015-9473—The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter.EPSS 3.7%CVE-2013-1415—The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution CeEPSS 3.7%CVE-2017-9468—In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC seEPSS 3.7%CVE-2013-4147—Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial EPSS 3.7%CVE-2014-2046—cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers tEPSS 3.7%CVE-2012-3556—Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which EPSS 3.7%