Vulnerabilidades em N/A

161.284 resultados
CVE-2011-2529—chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' EPSS 4.3%CVE-2008-1467—CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related tEPSS 4.3%CVE-2016-3151—Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSEPSS 4.3%CVE-2020-23653—An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wEPSS 4.3%CVE-2019-18643—Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only protectionEPSS 4.3%CVE-2021-44593—Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the usernamEPSS 4.3%CVE-2006-4974—Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PAEPSS 4.3%CVE-2004-1916—Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary codeEPSS 4.3%CVE-2016-5740—An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical attachments within schedEPSS 4.3%CVE-2011-3503—Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackerEPSS 4.3%CVE-2011-0868—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers EPSS 4.3%CVE-2012-4875—Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote aEPSS 4.3%CVE-2013-2691—Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2EPSS 4.3%CVE-2015-8731—The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x beforeEPSS 4.3%CVE-2012-5006—Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remEPSS 4.3%CVE-2013-0710—Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document.EPSS 4.3%CVE-2009-2064—Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses httpsEPSS 4.3%CVE-2002-1480—Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pageEPSS 4.3%CVE-2014-2262—Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attaEPSS 4.3%CVE-2002-0676—SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to executEPSS 4.3%