Vulnerabilidades en n/a
161.399 resultadosCVE-2018-13982—Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template codeEPSS 3.5%CVE-2015-8879—The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remEPSS 3.5%CVE-2016-1225—Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors.EPSS 3.5%CVE-2008-3542—Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors.EPSS 3.5%CVE-2004-0550—Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (perioEPSS 3.5%CVE-2016-4178—Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attEPSS 3.5%CVE-2014-3114—The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary comEPSS 3.5%CVE-2006-4714—PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when regiEPSS 3.5%CVE-2013-2737—A JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to obtain sensitEPSS 3.5%CVE-2016-1000146—Reflected XSS in wordpress plugin pondol-formmail v1.1EPSS 3.5%CVE-2013-7097—Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. (doEPSS 3.5%CVE-2005-2679—Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a loEPSS 3.5%CVE-2013-1753—The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memoryEPSS 3.5%CVE-2016-1000141—Reflected XSS in wordpress plugin page-layout-builder v1.9.3EPSS 3.5%CVE-2009-3038—A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager EPSS 3.5%CVE-2003-0243—Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for EPSS 3.5%CVE-2002-0227—KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.EPSS 3.5%CVE-2009-2417—lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in theEPSS 3.5%CVE-2002-2325—The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attaEPSS 3.5%CVE-2014-2470—Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allEPSS 3.5%