Vulnerabilidades em N/A

161.400 resultados
CVE-2021-33196—In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReaEPSS 3.5%CVE-2014-1923—Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before EPSS 3.5%CVE-2006-6169—Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allEPSS 3.5%CVE-2009-3748—Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and EmaiEPSS 3.5%CVE-2016-7939—The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.EPSS 3.5%CVE-2012-3017—Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and servEPSS 3.5%CVE-2012-3016—Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transitiEPSS 3.5%CVE-2016-9243—HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.EPSS 3.5%CVE-2015-2366—win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 GoEPSS 3.5%CVE-2012-3989—Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable duEPSS 3.5%CVE-2019-9743—An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI componentEPSS 3.5%CVE-2016-7530—The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) EPSS 3.5%CVE-2018-20795—tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through thEPSS 3.5%CVE-2017-12985CRITICALThe IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().EPSS 3.5%CVE-2009-1364—Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (aEPSS 3.5%CVE-2018-20792—tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through theEPSS 3.5%CVE-2022-24312—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing fileEPSS 3.5%CVE-2017-13010CRITICALThe BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().EPSS 3.5%CVE-2001-0513—Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, whEPSS 3.5%CVE-2021-41817—Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions EPSS 3.5%