Vulnerabilidades en n/a

161.457 resultados
CVE-2005-2763—Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (crash) and possibly exEPSS 2.7%CVE-2005-3978—Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and FrEPSS 2.7%CVE-2016-4729—WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory coEPSS 2.7%CVE-2006-2179—Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameteEPSS 2.7%CVE-2012-2275—Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authenticationEPSS 2.7%CVE-2015-4807—Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticEPSS 2.7%CVE-2005-4485—Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HEPSS 2.7%CVE-2010-2786—Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspEPSS 2.7%CVE-2006-2214—Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionEPSS 2.7%CVE-2017-18258—The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafEPSS 2.7%CVE-2012-0024—MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisionEPSS 2.7%CVE-2020-10971—An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution oEPSS 2.7%CVE-2019-17192—The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before aEPSS 2.7%CVE-2021-27213—config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.EPSS 2.7%CVE-2003-0736—Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script vEPSS 2.7%CVE-2008-1624—Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrarEPSS 2.7%CVE-2006-0340—Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, wEPSS 2.7%CVE-2020-25710—A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to fEPSS 2.7%CVE-2015-2991—Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data.EPSS 2.7%CVE-2020-17541—Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file EPSS 2.7%