Vulnerabilidades em N/A
161.399 resultadosCVE-2019-12460—Web Port 1.19.1 allows XSS via the /access/setup type parameter.EPSS 3.6%CVE-2013-5754—The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master passwoEPSS 3.6%CVE-2018-19789—An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, andEPSS 3.6%CVE-2014-4351—Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (applEPSS 3.6%CVE-2008-1403—Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remotEPSS 3.6%CVE-2009-1656—Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7EPSS 3.6%CVE-2004-1207—The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second EncountEPSS 3.6%CVE-2007-0539—The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) EPSS 3.6%CVE-2020-12663—Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.EPSS 3.6%CVE-2001-1114—book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.EPSS 3.6%CVE-2014-8567—The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logoutEPSS 3.6%CVE-2021-39501—EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.EPSS 3.6%CVE-2016-3518—Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related toEPSS 3.6%CVE-2004-0916—Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containinEPSS 3.6%CVE-2019-9195—util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP arEPSS 3.6%CVE-2007-0239—OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a preparedEPSS 3.6%CVE-2013-4118—FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspeciEPSS 3.6%CVE-2016-9180—perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. ExternaEPSS 3.6%CVE-2017-14266—tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6EPSS 3.6%CVE-2020-7623—jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.EPSS 3.6%