Vulnerabilidades em N/A
161.457 resultadosCVE-2013-6172—steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings EPSS 2.9%CVE-2021-42781—Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the EPSS 2.9%CVE-2009-0828—QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database EPSS 2.9%CVE-2018-19134—In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript documenEPSS 2.9%CVE-2020-17362—search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.EPSS 2.9%CVE-2016-7164—The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and cEPSS 2.9%CVE-2006-0214—Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to EPSS 2.9%CVE-2011-0402—dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecEPSS 2.9%CVE-2020-11103—JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.EPSS 2.9%CVE-2022-26990—Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerabEPSS 2.9%CVE-2022-28906—TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLaEPSS 2.9%CVE-2006-0351—Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.EPSS 2.9%CVE-2013-4925—Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 alEPSS 2.9%CVE-2019-15164—rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.EPSS 2.9%CVE-2006-5361—Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle CollaboEPSS 2.9%CVE-2006-5366—Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) OracEPSS 2.9%CVE-2006-5355—Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, CollaborationEPSS 2.9%CVE-2006-5356—Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and CollEPSS 2.9%CVE-2022-23658—A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,EPSS 2.9%CVE-2007-5397—Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, and possibly other verEPSS 2.9%