Vulnerabilidades em N/A
161.456 resultadosCVE-2019-12326HIGHMissing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manEPSS 3.0%CVE-2016-1925—Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or EPSS 3.0%CVE-2019-17572—In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../EPSS 3.0%CVE-2011-4869—validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS EPSS 3.0%CVE-2015-8957—Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUEPSS 3.0%CVE-2013-4359—Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumptEPSS 3.0%CVE-2017-1000081—Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.EPSS 3.0%CVE-2015-1317—Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or poEPSS 3.0%CVE-2001-0264—Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file thEPSS 3.0%CVE-2020-16213—Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user EPSS 3.0%CVE-2007-1470—Multiple buffer overflows in LIBFtp 5.0 allow user-assisted remote attackers to execute arbitrary code via certain long arguments to the (1)EPSS 3.0%CVE-2016-7405—The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injectioEPSS 3.0%CVE-2008-2716—Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modEPSS 3.0%CVE-2006-0338—Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, InterneEPSS 3.0%CVE-2021-41946—In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --EPSS 3.0%CVE-2014-3318—Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications MEPSS 3.0%CVE-2017-17682—In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers EPSS 3.0%CVE-2022-20229—In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This cEPSS 3.0%CVE-2015-3814—The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in WirEPSS 3.0%CVE-2019-14430—plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.EPSS 3.0%