Vulnerabilidades em N/A
161.457 resultadosCVE-2020-15714—rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php scriEPSS 2.8%CVE-2018-18520—An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to sEPSS 2.8%CVE-2019-9106—The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or inclEPSS 2.8%CVE-2014-3657—The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which alEPSS 2.8%CVE-2019-8427—daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.EPSS 2.8%CVE-2008-1367—gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and iEPSS 2.8%CVE-2020-15713—rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script usEPSS 2.8%CVE-2004-0033—admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.EPSS 2.8%CVE-2006-3699—Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 and 9.2.0.6 has unknown impact and attack vectors, aka OracEPSS 2.8%CVE-2014-0475—Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass FEPSS 2.8%CVE-2015-0552—Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write EPSS 2.8%CVE-2004-1830—error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newEPSS 2.8%CVE-2023-42471—The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intenEPSS 2.8%CVE-2016-3483—Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remotEPSS 2.8%CVE-2002-1007—Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter EPSS 2.8%CVE-2012-3660—WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptiEPSS 2.8%CVE-2015-6465—The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial oEPSS 2.8%CVE-2015-6575—SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackersEPSS 2.8%CVE-2001-0051—IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain accesEPSS 2.8%CVE-2019-19458—SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.EPSS 2.8%