Vulnerabilidades en n/a
161.401 resultadosCVE-2009-1640—Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary EPSS 3.3%CVE-2019-5074—An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware versioEPSS 3.3%CVE-2018-17378—SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.EPSS 3.3%CVE-2018-17384—SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.EPSS 3.3%CVE-2018-17379—SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter.EPSS 3.3%CVE-2011-2712—Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remoteEPSS 3.3%CVE-2013-4529—Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrarEPSS 3.3%CVE-2019-10044—Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attaEPSS 3.3%CVE-2020-24368—Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitraryEPSS 3.3%CVE-2015-6032—Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for codeEPSS 3.3%CVE-2007-0268—Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1)EPSS 3.3%CVE-2018-8756—Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP EPSS 3.3%CVE-2018-17375—SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.EPSS 3.3%CVE-2022-24342—In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.EPSS 3.3%CVE-2019-7956—Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulneraEPSS 3.3%CVE-2018-7848—A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon PremiumEPSS 3.3%CVE-2018-5688—ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component.EPSS 3.3%CVE-2018-7845—A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium wEPSS 3.3%CVE-2007-6013—Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authenticationEPSS 3.3%CVE-2007-2531—PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to execute arbitrary PHP codEPSS 3.3%