Vulnerabilidades em N/A
161.456 resultadosCVE-2007-5240—Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earEPSS 3.0%CVE-2010-2104—Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files viaEPSS 3.0%CVE-2015-7815—Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arEPSS 3.0%CVE-2019-20907MEDIUMIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.opeEPSS 3.0%CVE-2022-24170—Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnelEPSS 3.0%CVE-2006-6427—The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000EPSS 3.0%CVE-2022-26994—Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerabEPSS 3.0%CVE-2022-24167—Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vEPSS 3.0%CVE-2019-6288—Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the command1 HTTP header to the /EXCU_SHELL URI.EPSS 3.0%CVE-2013-2293—The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementallEPSS 3.0%CVE-2021-3570—A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a rEPSS 3.0%CVE-2009-3362—PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in tEPSS 3.0%CVE-2020-25136—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.0%CVE-2022-27413—Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php.EPSS 3.0%CVE-2010-5087—SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mEPSS 3.0%CVE-2004-2475—Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html iEPSS 3.0%CVE-2002-1565—Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execEPSS 3.0%CVE-2013-3259—Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsEPSS 3.0%CVE-2015-7677—The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which alloEPSS 3.0%CVE-2017-9118—PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.EPSS 3.0%