Vulnerabilidades em N/A
161.284 resultadosCVE-2011-4256—The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index valueEPSS 4.3%CVE-2009-2299—The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a EPSS 4.3%CVE-2002-0608—Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.EPSS 4.3%CVE-2020-28035—WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.EPSS 4.3%CVE-2018-12018—The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation beEPSS 4.3%CVE-2008-0939—Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to exEPSS 4.3%CVE-2005-3985—The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial oEPSS 4.3%CVE-2008-1419—Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denialEPSS 4.3%CVE-2006-0044—Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commanEPSS 4.3%CVE-2012-2316—Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows rEPSS 4.3%CVE-2009-1899—Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere ApplicationEPSS 4.3%CVE-2021-44716—net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/EPSS 4.3%CVE-2014-0862—Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x befEPSS 4.3%CVE-2016-2539—Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers to hijack the authentiEPSS 4.3%CVE-2018-10102—Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.EPSS 4.3%CVE-2011-3850—Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web sEPSS 4.3%CVE-2017-6413—The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does EPSS 4.3%CVE-2020-17383—A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the dEPSS 4.3%CVE-2015-8242—The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers tEPSS 4.3%CVE-2008-0616—SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrEPSS 4.3%