Vulnerabilidades en n/a
161.266 resultadosCVE-2012-1172—The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name EPSS 6.2%CVE-2006-5805—Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link toEPSS 6.2%CVE-2015-5243—phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.EPSS 6.2%CVE-2019-13548—CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could causEPSS 6.2%CVE-2013-1629—pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allEPSS 6.2%CVE-2010-0843—Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 EPSS 6.2%CVE-2009-0262—Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a loEPSS 6.2%CVE-2010-2499—Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial oEPSS 6.2%CVE-2010-0841—Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows rEPSS 6.2%CVE-2014-0082—actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during uEPSS 6.2%CVE-2020-28648—Improper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an authenticated attacker to execute remote code.EPSS 6.2%CVE-2014-0564—Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR befEPSS 6.2%CVE-2018-10018—The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argEPSS 6.2%CVE-2009-1725—WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kEPSS 6.2%CVE-2004-1575—The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XMEPSS 6.2%CVE-2003-1469—The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to oEPSS 6.2%CVE-2020-20982—Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, EPSS 6.2%CVE-2006-7032—PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code vEPSS 6.2%CVE-2018-18762—SaltOS 3.1 r8126 contains a database download vulnerability.EPSS 6.2%CVE-2021-43033—An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Multiple functions in the bpserverd daemon were vulnerable to arEPSS 6.2%