Vulnerabilidades en n/a
161.399 resultadosCVE-2018-14553—gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specifEPSS 3.4%CVE-2011-3457—The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which alEPSS 3.4%CVE-2009-1784—The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security NetzwerkEPSS 3.4%CVE-2007-2867—Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5EPSS 3.4%CVE-2008-3808—Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted EPSS 3.4%CVE-2014-9673—Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause aEPSS 3.4%CVE-2016-1405—libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices beforEPSS 3.4%CVE-2009-2053—Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, andEPSS 3.4%CVE-2014-1594—Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers tEPSS 3.4%CVE-2012-1059—Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2EPSS 3.4%CVE-2015-4145—The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being proceEPSS 3.4%CVE-2014-5109—SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitraEPSS 3.4%CVE-2013-1739—Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allEPSS 3.4%CVE-2015-4144—The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to EPSS 3.4%CVE-2017-14648—A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an outEPSS 3.4%CVE-2020-22001—HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header wiEPSS 3.4%CVE-2017-12138—XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.EPSS 3.4%CVE-2010-4535—The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not valEPSS 3.4%CVE-2011-3459—Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of serviceEPSS 3.4%CVE-2004-1478—JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijackEPSS 3.4%