Vulnerabilidades em N/A

161.400 resultados
CVE-2013-7054—D-Link DIR-100 4.03B07: cli.cgi XSSEPSS 3.5%CVE-2017-11356—The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privilEPSS 3.5%CVE-2009-2988—Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to caEPSS 3.5%CVE-2014-2669—Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3EPSS 3.5%CVE-2008-6441—Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary coEPSS 3.5%CVE-2009-5087—Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrEPSS 3.5%CVE-2019-12148—The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection EPSS 3.5%CVE-2014-5014—The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to EPSS 3.5%CVE-2008-4329—PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute EPSS 3.5%CVE-2012-2401—Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of theEPSS 3.5%CVE-2005-2176—Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remoteEPSS 3.5%CVE-2013-2021—pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value iEPSS 3.5%CVE-2015-6855—hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of serEPSS 3.5%CVE-2014-9522—Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers to inject arbitrary web scripEPSS 3.5%CVE-2015-1782—The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified EPSS 3.5%CVE-2004-2071—Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interEPSS 3.5%CVE-2014-8653—Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.EPSS 3.5%CVE-2001-1184—wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) iEPSS 3.5%CVE-2023-33443CRITICALIncorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrEPSS 3.5%CVE-2008-6651—Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oEPSS 3.5%