Vulnerabilidades en n/a
161.457 resultadosCVE-2002-0324—Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administratiEPSS 2.7%CVE-2009-3294—The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, EPSS 2.7%CVE-2021-26237—FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malforEPSS 2.7%CVE-2004-0294—YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid usEPSS 2.7%CVE-1999-0754—The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmentaEPSS 2.7%CVE-2013-4282—Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial ofEPSS 2.7%CVE-2015-5917—The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of serEPSS 2.7%CVE-2018-16336—Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) vEPSS 2.7%CVE-2017-15379—An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.EPSS 2.7%CVE-2017-9429—SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via EPSS 2.7%CVE-2016-2530—The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x beforEPSS 2.7%CVE-2019-14249—dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file withEPSS 2.7%CVE-2018-18073—Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved executEPSS 2.7%CVE-2021-3210—components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands whEPSS 2.7%CVE-2005-2769—Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web scriEPSS 2.7%CVE-2005-2430—Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) EPSS 2.7%CVE-2005-2763—Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (crash) and possibly exEPSS 2.7%CVE-2017-18258—The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafEPSS 2.7%CVE-2020-10239—An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmEPSS 2.7%CVE-2018-10753—Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial oEPSS 2.7%