Vulnerabilidades em N/A
161.457 resultadosCVE-2006-4215—PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register_globals is enabled, allows remote attackEPSS 2.9%CVE-2007-5452—Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands EPSS 2.9%CVE-2006-0735—Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1EPSS 2.9%CVE-2016-0278—Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackEPSS 2.9%CVE-2016-1468—The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to exeEPSS 2.9%CVE-2016-0769—Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execuEPSS 2.9%CVE-2018-15882—An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files toEPSS 2.9%CVE-2006-7130—PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute EPSS 2.9%CVE-2000-0546—Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey EPSS 2.9%CVE-2000-0547—Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4EPSS 2.9%CVE-2006-5868—Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors viaEPSS 2.9%CVE-2016-1857—WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or EPSS 2.9%CVE-2020-27227CRITICALAn exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to bEPSS 2.9%CVE-2015-8985—The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (asserEPSS 2.9%CVE-2017-17042—lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attacEPSS 2.9%CVE-2019-13578—A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerabEPSS 2.9%CVE-2016-6866—slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference aEPSS 2.9%CVE-2006-1329—The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sendingEPSS 2.9%CVE-2003-1550—XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, whicEPSS 2.9%CVE-2008-1025—Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web scEPSS 2.9%