Vulnerabilidades en n/a
161.455 resultadosCVE-2001-1481—Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readabEPSS 3.2%CVE-2010-2443—The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dEPSS 3.2%CVE-2009-2537—KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property ofEPSS 3.2%CVE-2026-25667HIGHASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumptEPSS 3.2%CVE-2015-2059—The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory andEPSS 3.2%CVE-2019-9160—WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the sysEPSS 3.2%CVE-2020-25270—PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.EPSS 3.2%CVE-2007-0279—Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impaEPSS 3.2%CVE-2017-9047—A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to reEPSS 3.2%CVE-2018-14884—An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leEPSS 3.2%CVE-2007-2416—SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter.EPSS 3.2%CVE-2020-21585—Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.EPSS 3.2%CVE-2012-6692—Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remoteEPSS 3.2%CVE-2012-3492—The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directEPSS 3.2%CVE-2012-4460—The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause aEPSS 3.2%CVE-2008-1245—cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (cEPSS 3.2%CVE-2009-1912—Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbEPSS 3.2%CVE-2014-9593—Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts API call.EPSS 3.2%CVE-2008-6122—The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a request that contains a EPSS 3.2%CVE-2016-7457—VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual macEPSS 3.2%