Vulnerabilidades en n/a
161.457 resultadosCVE-2001-1572—The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers EPSS 2.8%CVE-2006-3602—Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrarEPSS 2.8%CVE-2026-38708CRITICALTR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2EPSS 2.8%CVE-2026-38711CRITICALTR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2EPSS 2.8%CVE-2002-0344—Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the regEPSS 2.8%CVE-2021-46117—jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a functionEPSS 2.8%CVE-2008-2933—Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tEPSS 2.8%CVE-2006-2787—EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valEPSS 2.8%CVE-2018-18715—Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS.EPSS 2.8%CVE-2021-35942CRITICALThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) whEPSS 2.8%CVE-2020-13112—An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure EPSS 2.8%CVE-2013-3552—Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF fileEPSS 2.8%CVE-2005-2069—pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the clEPSS 2.8%CVE-2016-5837—WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecEPSS 2.8%CVE-2013-7185—PotPlayer 1.5.40688: .avi File Memory CorruptionEPSS 2.8%CVE-2017-18379—In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.EPSS 2.8%CVE-2019-14192—An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_EPSS 2.8%CVE-2012-4548—Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to aEPSS 2.8%CVE-2013-6440—The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set tEPSS 2.8%CVE-2017-7725—concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on instEPSS 2.8%