Vulnerabilidades em N/A
161.457 resultadosCVE-2011-0737MEDIUMAdobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveEPSS 2.8%CVE-2012-3518—The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, wEPSS 2.8%CVE-2008-4919—Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overEPSS 2.8%CVE-2021-32936—An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from tEPSS 2.8%CVE-2016-0699—Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remEPSS 2.8%CVE-2021-30150—Composr 10.0.36 allows XSS in an XML script.EPSS 2.8%CVE-2007-6235—A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malfoEPSS 2.8%CVE-2015-1381—Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation faEPSS 2.8%CVE-2012-5621—lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connEPSS 2.8%CVE-2015-1382—parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HEPSS 2.8%CVE-2017-5078—Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac alEPSS 2.8%CVE-2020-7772HIGHPrototype PollutionEPSS 2.8%CVE-2020-16272—The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote aEPSS 2.8%CVE-2015-8037—Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remoteEPSS 2.8%CVE-2018-6940—A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in cEPSS 2.8%CVE-2015-8038—Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remoteEPSS 2.8%CVE-2015-2779—Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial EPSS 2.8%CVE-2016-4351—SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allowsEPSS 2.8%CVE-2006-3925—Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackEPSS 2.8%CVE-2018-17075—The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for hEPSS 2.8%