Vulnerabilidades em N/A
161.455 resultadosCVE-2019-20388HIGHxmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.EPSS 3.2%CVE-2020-28173—Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a mEPSS 3.2%CVE-2016-7457—VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual macEPSS 3.2%CVE-2003-0310—Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.EPSS 3.2%CVE-2006-2324—180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent atEPSS 3.2%CVE-2009-3376—Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO oEPSS 3.2%CVE-2020-17439—An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate tEPSS 3.2%CVE-2008-4200—Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to cEPSS 3.2%CVE-2014-1569—The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.1EPSS 3.2%CVE-2004-0218—isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-lenEPSS 3.2%CVE-2006-3158—index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypaEPSS 3.2%CVE-2006-5021CRITICALMultiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (EPSS 3.2%CVE-2001-0015—Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisibleEPSS 3.2%CVE-2022-22827HIGHstoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.2%CVE-2007-3310—Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara pEPSS 3.2%CVE-2022-22826HIGHnextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.2%CVE-2002-0846—The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more dEPSS 3.2%CVE-2011-0115—The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM maniEPSS 3.2%CVE-2006-4488—PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_globals is enabled, aEPSS 3.2%CVE-2016-9424—An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which aEPSS 3.2%