Vulnerabilidades em N/A
161.457 resultadosCVE-2004-2374—BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes theEPSS 2.8%CVE-2005-4275—Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same soEPSS 2.8%CVE-2004-1786—PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensiEPSS 2.8%CVE-2011-5217—Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and beforeEPSS 2.8%CVE-2015-2075—SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP EPSS 2.8%CVE-2010-3475—IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remoEPSS 2.8%CVE-2008-0657—Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlieEPSS 2.8%CVE-2018-9261—In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overfloEPSS 2.8%CVE-2018-17428—An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.EPSS 2.8%CVE-2016-10711—Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.EPSS 2.8%CVE-2008-5980—Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers tEPSS 2.8%CVE-2021-33790—The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as pEPSS 2.8%CVE-2003-0170—Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privilegEPSS 2.8%CVE-2002-1886—TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain theEPSS 2.8%CVE-2009-2689—JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of uEPSS 2.8%CVE-2002-0970—The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, wEPSS 2.8%CVE-2012-1821—The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows SEPSS 2.8%CVE-2024-36622CRITICALIn RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to EPSS 2.8%CVE-2011-3446—Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackersEPSS 2.8%CVE-2021-28861MEDIUMPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginniEPSS 2.8%