Vulnerabilidades em N/A
161.457 resultadosCVE-2002-0324—Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administratiEPSS 2.7%CVE-2015-8356—Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated users to execute arbiEPSS 2.7%CVE-2014-8566—The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fEPSS 2.7%CVE-2020-6115HIGHAn exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. WhEPSS 2.7%CVE-2018-16336—Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) vEPSS 2.7%CVE-2013-4282—Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial ofEPSS 2.7%CVE-2015-5917—The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of serEPSS 2.7%CVE-2017-15379—An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.EPSS 2.7%CVE-2005-2769—Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web scriEPSS 2.7%CVE-2005-2430—Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) EPSS 2.7%CVE-1999-0754—The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmentaEPSS 2.7%CVE-2017-9429—SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via EPSS 2.7%CVE-2019-14249—dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file withEPSS 2.7%CVE-2016-2530—The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x beforEPSS 2.7%CVE-2021-3210—components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands whEPSS 2.7%CVE-2018-18073—Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved executEPSS 2.7%CVE-2015-2701—Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests EPSS 2.7%CVE-2015-4807—Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticEPSS 2.7%CVE-2006-2214—Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionEPSS 2.7%CVE-2006-2179—Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameteEPSS 2.7%