Vulnerabilidades em N/A
161.457 resultadosCVE-2004-2636—TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.EPSS 2.9%CVE-2015-4507—The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attacEPSS 2.9%CVE-2010-3789—QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrEPSS 2.9%CVE-2005-3728—Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote EPSS 2.9%CVE-2005-3432—MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * EPSS 2.9%CVE-2000-0739—Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbiEPSS 2.9%CVE-2010-3793—QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrEPSS 2.9%CVE-2013-0252—boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequencEPSS 2.9%CVE-2015-0713—The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series SoftwaEPSS 2.9%CVE-2003-1089—index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the paEPSS 2.9%CVE-2005-2956—ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and preEPSS 2.9%CVE-2021-33965—China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and thEPSS 2.9%CVE-2018-7262—In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP hEPSS 2.9%CVE-2020-29551—An issue was discovered in URVE Build 24.03.2020. Using the _internal/pc/shutdown.php path, it is possible to shutdown the system. Among othEPSS 2.9%CVE-2009-2431—WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by EPSS 2.9%CVE-2010-3205—PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a UREPSS 2.9%CVE-2022-31395—Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web requEPSS 2.9%CVE-2015-7107—QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (meEPSS 2.9%CVE-2015-6541—Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remotEPSS 2.9%CVE-2005-2484—Buffer overflow in the rdb_query function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code.EPSS 2.9%