Vulnerabilidades en n/a

161.188 resultados
CVE-2005-4838—Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackEPSS 7.9%CVE-2002-0935—Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustioEPSS 7.9%CVE-2018-7653—In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.EPSS 7.9%CVE-2000-0925—The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissEPSS 7.9%CVE-2002-0107—Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series ofEPSS 7.9%CVE-2000-1181—Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitEPSS 7.9%CVE-1999-0387—A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.EPSS 7.9%CVE-2000-0634—The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) atEPSS 7.9%CVE-2000-0924—Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (EPSS 7.9%CVE-1999-1050—Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot doEPSS 7.9%CVE-2015-0351—Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before EPSS 7.8%CVE-2015-3039—Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before EPSS 7.8%CVE-2019-14251—An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a document on the server oEPSS 7.8%CVE-2007-1568—Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc (yEncode) enEPSS 7.8%CVE-2019-11660—Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerabEPSS 7.8%CVE-2008-5912—An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when theEPSS 7.8%CVE-2010-0280—Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a deniaEPSS 7.8%CVE-2014-4616—Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependEPSS 7.8%CVE-2003-0290—Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections, whose EPSS 7.8%CVE-2021-27135—xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTEPSS 7.8%