Vulnerabilidades en n/a

161.138 resultados
CVE-2007-2677—Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code viEPSS 9.5%CVE-2013-0504—Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and befEPSS 9.5%CVE-2015-6044—Microsoft Internet Explorer 8 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low InEPSS 9.5%CVE-2022-32275HIGHGrafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.. /.. /.. /.. /.. /etEPSS 9.5%CVE-2018-16668—An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authenticatioEPSS 9.5%CVE-2000-0768—A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote atEPSS 9.5%CVE-2013-1768—The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logginEPSS 9.5%CVE-2004-0888—Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attaEPSS 9.5%CVE-2017-3059—Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. SuccessfuEPSS 9.5%CVE-2017-3062—Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/EPSS 9.5%CVE-2019-19649—Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameterEPSS 9.5%CVE-2002-2311—Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key correspEPSS 9.5%CVE-2006-6740—Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code viEPSS 9.5%CVE-2018-18793—School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.EPSS 9.5%CVE-2002-0484—move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files EPSS 9.5%CVE-2017-7041—An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on WEPSS 9.5%CVE-2009-3874—Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK andEPSS 9.5%CVE-2010-4180—OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modificatEPSS 9.5%CVE-2009-0955—Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted EPSS 9.5%CVE-2017-15276—OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an aEPSS 9.5%