Vulnerabilidades en n/a
161.148 resultadosCVE-2009-4413—The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to causeEPSS 8.7%CVE-2009-1684—Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1EPSS 8.7%CVE-2023-46977CRITICALTOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.EPSS 8.7%CVE-2001-0852—TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.EPSS 8.7%CVE-2018-7318—SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filtEPSS 8.7%CVE-2020-25483—An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain accessEPSS 8.6%CVE-2020-25368—A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is abEPSS 8.6%CVE-2020-25367—A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is abEPSS 8.6%CVE-2004-0480—Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that usEPSS 8.6%CVE-2018-5061—Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounEPSS 8.6%CVE-2019-16869—Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leadsEPSS 8.6%CVE-2000-0612—Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cachEPSS 8.6%CVE-2000-1023—The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain nameEPSS 8.6%CVE-2009-0177—vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMwEPSS 8.6%CVE-2006-4437—Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in (1) tags.php, (2) siEPSS 8.6%CVE-2019-20330CRITICALFasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.EPSS 8.6%CVE-2005-1740—fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files tEPSS 8.6%CVE-2005-1112—IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the soEPSS 8.6%CVE-2010-0016—The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields,EPSS 8.6%CVE-2002-1222—Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denEPSS 8.6%