Vulnerabilidades em N/A
161.276 resultadosCVE-2020-8497—In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user nEPSS 4.8%CVE-2017-15646—Webmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager' menu, there is a 'Download from remote URLEPSS 4.8%CVE-2015-6525—Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackersEPSS 4.8%CVE-1999-0873—Buffer overflow in Skyfull mail server via MAIL FROM command.EPSS 4.8%CVE-2017-15374—Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend moduEPSS 4.8%CVE-2012-0027—The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackerEPSS 4.8%CVE-2017-11145—In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be useEPSS 4.8%CVE-2008-2751—Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow rEPSS 4.8%CVE-2010-3168—Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not proEPSS 4.8%CVE-2010-3772—Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain chiEPSS 4.8%CVE-2010-3768—Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not EPSS 4.8%CVE-2010-3767—Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows reEPSS 4.8%CVE-2010-1198—Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackEPSS 4.8%CVE-2009-3947—Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (process crash or device reEPSS 4.8%CVE-2009-4759—Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) or possibly execute aEPSS 4.8%CVE-2011-3250—Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (applicationEPSS 4.8%CVE-2015-5681—Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arEPSS 4.8%CVE-2009-0643—Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.EPSS 4.8%CVE-2009-1059—Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CEPSS 4.8%CVE-2009-2961—Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (crash) or execute arbitrEPSS 4.8%