Vulnerabilidades em N/A
161.457 resultadosCVE-2011-0987—The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properEPSS 2.7%CVE-2008-1624—Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrarEPSS 2.7%CVE-2003-0736—Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script vEPSS 2.7%CVE-2018-16797—A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file wiEPSS 2.7%CVE-2011-1838—Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary webEPSS 2.7%CVE-2014-4242—Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allEPSS 2.7%CVE-2007-0647—Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (crash) via format strinEPSS 2.7%CVE-2008-6870—Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct requestEPSS 2.7%CVE-2020-17541—Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file EPSS 2.7%CVE-2007-4726—Directory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.EPSS 2.7%CVE-2019-7389—An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remEPSS 2.7%CVE-2006-0340—Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, wEPSS 2.7%CVE-2020-25710—A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to fEPSS 2.7%CVE-2018-9092—There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password.EPSS 2.7%CVE-2020-15468—Persian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter.EPSS 2.7%CVE-2020-35125—A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScEPSS 2.7%CVE-2012-2181—Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote attackeEPSS 2.7%CVE-2017-13884—An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on WindoEPSS 2.7%CVE-2020-28144—Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 SEPSS 2.7%CVE-2012-4742—The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified EPSS 2.7%