Vulnerabilidades em N/A
161.455 resultadosCVE-2024-21512HIGHVersions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields aEPSS 3.1%CVE-2025-56127HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request tEPSS 3.1%CVE-2016-0889—An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary filesEPSS 3.1%CVE-2018-11813—libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.EPSS 3.1%CVE-2007-2205—PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1.5.4, allows remote EPSS 3.1%CVE-2005-1810—SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands EPSS 3.1%CVE-2014-4486—IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists EPSS 3.1%CVE-2022-28738—A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp fromEPSS 3.1%CVE-2010-0360—Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the conteEPSS 3.1%CVE-2018-21029—systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is EPSS 3.1%CVE-2021-44255—Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration bEPSS 3.1%CVE-2012-5070—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers tEPSS 3.1%CVE-2008-5956—Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote EPSS 3.1%CVE-2008-3813—Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a deniaEPSS 3.1%CVE-2014-6408—Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container bEPSS 3.1%CVE-2012-2400—Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors.EPSS 3.1%CVE-2014-3730—The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not proEPSS 3.1%CVE-2020-8495HIGHIn Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attaEPSS 3.1%CVE-2004-1216—The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server freeze) via a long (1)EPSS 3.1%CVE-2000-0570—FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending anEPSS 3.1%