Vulnerabilidades em N/A
161.455 resultadosCVE-2019-19232—In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numEPSS 3.3%CVE-2018-14057—Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the X-pimcore-EPSS 3.3%CVE-2006-3736—PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attacEPSS 3.3%CVE-2009-0973—Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availabilityEPSS 3.3%CVE-2008-5696—Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacEPSS 3.3%CVE-2017-9115—In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary EPSS 3.3%CVE-2006-6910—formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers to cause a denial of service (EPSS 3.3%CVE-2018-8550—An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects WiEPSS 3.3%CVE-2014-0384—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticateEPSS 3.3%CVE-2008-1256—The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access.EPSS 3.3%CVE-2008-4934—The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from EPSS 3.3%CVE-2011-2091—Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown veEPSS 3.3%CVE-2019-11070—WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (EPSS 3.3%CVE-2017-5200—Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on EPSS 3.3%CVE-2013-1453—plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP EPSS 3.3%CVE-2007-4524—PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in EPSS 3.3%CVE-2011-2260—Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confEPSS 3.3%CVE-2009-2838—Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (appliEPSS 3.3%CVE-2015-3220—The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).EPSS 3.3%CVE-2008-4390—The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remoteEPSS 3.3%