Vulnerabilidades en n/a

161.455 resultados
CVE-2007-3590—Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote attackers to inject arbitrary web script or HTML EPSS 3.2%CVE-2005-0208—The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML tEPSS 3.2%CVE-2020-12845—Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crasEPSS 3.2%CVE-2020-5759—Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacEPSS 3.2%CVE-2015-4342—SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involviEPSS 3.2%CVE-2009-0137—Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers toEPSS 3.2%CVE-2004-1201—Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using JavascriptEPSS 3.2%CVE-2009-2160—TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls EPSS 3.2%CVE-2007-5532—Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.EPSS 3.2%CVE-2019-8979—Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.EPSS 3.2%CVE-2021-46828HIGHIn libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connectionEPSS 3.2%CVE-2016-1442—The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commEPSS 3.2%CVE-2005-2290—wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art anEPSS 3.2%CVE-2012-1702—Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affecEPSS 3.2%CVE-2006-0998—The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instEPSS 3.2%CVE-2005-1462—Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.EPSS 3.2%CVE-2021-33195—Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return vaEPSS 3.2%CVE-2020-7472—An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0EPSS 3.2%CVE-2019-5133CRITICALAn exploitable out-of-bounds write vulnerability exists in the igcore19d.dll BMP parser of the ImageGear 19.3.0 library. A specially craftedEPSS 3.2%CVE-2015-7912—The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to EPSS 3.2%