Vulnerabilidades em N/A
161.457 resultadosCVE-2017-17858—Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentialEPSS 2.7%CVE-2006-6213—index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct PHP remote file incEPSS 2.7%CVE-2021-35368—OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trEPSS 2.7%CVE-2019-14748—An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along withEPSS 2.7%CVE-2017-11285—Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update EPSS 2.7%CVE-2019-20840—An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReaEPSS 2.7%CVE-2013-3794—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to aEPSS 2.7%CVE-2006-6202—PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chEPSS 2.7%CVE-2007-5418—Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the roEPSS 2.7%CVE-2016-1904—Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly haEPSS 2.7%CVE-2018-16613—An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalateEPSS 2.7%CVE-2014-3205—backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a backdoor user.EPSS 2.7%CVE-2014-8652—Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTEPSS 2.7%CVE-2019-7316—An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.EPSS 2.7%CVE-2015-8272—RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).EPSS 2.7%CVE-2002-0912—in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows rEPSS 2.7%CVE-2002-0711—Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a dEPSS 2.7%CVE-2002-1449—eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitEPSS 2.7%CVE-2006-1871—SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via theEPSS 2.7%CVE-2011-5280—Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (EPSS 2.7%