Vulnerabilidades em N/A
161.457 resultadosCVE-2020-14968—An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signaturEPSS 2.9%CVE-2005-0496—Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to accEPSS 2.9%CVE-2010-2725—BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allowsEPSS 2.9%CVE-2020-8637—A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_idEPSS 2.9%CVE-2022-25135—A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211EPSS 2.9%CVE-2021-37416—Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.EPSS 2.9%CVE-2018-1000076—RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 seriesEPSS 2.9%CVE-2007-4770—libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zEPSS 2.9%CVE-2003-1013—The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed QEPSS 2.9%CVE-2017-5538—The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software anEPSS 2.9%CVE-2024-29864CRITICALDistrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into exported executables.EPSS 2.9%CVE-2021-22651—When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot NEPSS 2.9%CVE-2004-1991—Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HEPSS 2.9%CVE-2010-1394—Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on MEPSS 2.9%CVE-2008-0640—Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost MEPSS 2.9%CVE-2009-2040—admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create adminiEPSS 2.9%CVE-2016-5034—dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted fileEPSS 2.9%CVE-2021-40084—opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows commaEPSS 2.9%CVE-2014-6424—The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.1EPSS 2.9%CVE-2010-1389—Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on MEPSS 2.9%