Vulnerabilidades em N/A
161.457 resultadosCVE-2007-4364—Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), rEPSS 2.8%CVE-2007-5152—Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication aftEPSS 2.8%CVE-2015-3319—Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackeEPSS 2.8%CVE-2014-9452—Directory traversal vulnerability in VDG Security SENSE (formerly DIVA) 2.3.13 allows remote attackers to read arbitrary files via a .. (dotEPSS 2.8%CVE-2014-3864—Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directoriEPSS 2.8%CVE-2009-1693—WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to reEPSS 2.8%CVE-2020-15926—Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the clienEPSS 2.8%CVE-2014-8360—Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrarEPSS 2.8%CVE-2018-6003—An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER deEPSS 2.8%CVE-2014-9472—The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denEPSS 2.8%CVE-2007-0364—Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web sEPSS 2.8%CVE-2015-8547—The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of seEPSS 2.8%CVE-2019-5459—An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.EPSS 2.8%CVE-2016-7101—The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row valueEPSS 2.8%CVE-2018-4023CRITICALAn exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the AnkerEPSS 2.8%CVE-2015-2721—Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38EPSS 2.8%CVE-2017-11185HIGHThe gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) vEPSS 2.8%CVE-2014-3352—Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a proEPSS 2.8%CVE-2016-5050—Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploadingEPSS 2.8%CVE-2015-4928—Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which alloEPSS 2.8%