Vulnerabilidades en n/a
161.400 resultadosCVE-2015-2959—Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote attackers to obtain sensiEPSS 3.3%CVE-2015-0557—Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute pathEPSS 3.3%CVE-2019-16530—Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.EPSS 3.3%CVE-2010-1817—Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause aEPSS 3.3%CVE-2008-3964—Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial ofEPSS 3.3%CVE-2005-2502—Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers EPSS 3.3%CVE-2010-2713—The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminEPSS 3.3%CVE-2016-7435—The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP NetEPSS 3.3%CVE-2008-3106—Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlEPSS 3.3%CVE-2010-2445—freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that conEPSS 3.3%CVE-2017-14116—The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver EPSS 3.3%CVE-2005-1667—DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request.EPSS 3.3%CVE-2004-2371—Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do noEPSS 3.3%CVE-2019-8391—qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.EPSS 3.3%CVE-2008-3110—Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows rEPSS 3.3%CVE-2016-9428HIGHAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3EPSS 3.3%CVE-2016-0495—Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote aEPSS 3.3%CVE-2021-27229—Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage textEPSS 3.3%CVE-2019-16931—A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript wEPSS 3.3%CVE-2013-6672—Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging cerEPSS 3.3%