Vulnerabilidades em N/A

161.457 resultados
CVE-2009-4811—VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600EPSS 2.8%CVE-2021-20270—An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a StandaEPSS 2.8%CVE-2014-1207—VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by interceptiEPSS 2.8%CVE-2002-0410—send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via EPSS 2.8%CVE-2013-1883—Mantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service (resource consumption) via a filEPSS 2.8%CVE-2008-6335—Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to read arbitrary files viEPSS 2.8%CVE-2013-0336—The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2EPSS 2.8%CVE-2008-6334—Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary files via a .. (dot dEPSS 2.8%CVE-2019-12771—Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or afEPSS 2.8%CVE-2016-2933—Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary filEPSS 2.8%CVE-2020-7043—An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostnEPSS 2.8%CVE-2008-6288—Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to read arbitrary filesEPSS 2.8%CVE-2011-4353—The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7EPSS 2.8%CVE-2022-26564—HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability via the prezzoperiodo4 parameter in creaprezEPSS 2.8%CVE-2001-1081—Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service aEPSS 2.8%CVE-2005-1375—Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to exEPSS 2.8%CVE-2002-1078—Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) cEPSS 2.8%CVE-2010-3488—Directory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary files via a ... (triple dot) in the URL.EPSS 2.8%CVE-2004-2560—DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbEPSS 2.8%CVE-2006-0695—Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrarEPSS 2.8%