Vulnerabilidades em N/A
161.457 resultadosCVE-2020-15391—The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WeEPSS 2.7%CVE-2015-4527—Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attEPSS 2.7%CVE-2012-3443—The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data duringEPSS 2.7%CVE-2013-4828—HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775;EPSS 2.7%CVE-2016-0791—Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attEPSS 2.7%CVE-2010-2850—Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, alloEPSS 2.7%CVE-2009-2000—Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via EPSS 2.7%CVE-2010-0834—The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell LatitudEPSS 2.7%CVE-2009-1997—Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confideEPSS 2.7%CVE-2002-2094—Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path thEPSS 2.7%CVE-2009-0041—IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x beforEPSS 2.7%CVE-2006-0457—Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of sEPSS 2.7%CVE-2009-2663—libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denEPSS 2.7%CVE-2012-1110—Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML EPSS 2.7%CVE-2014-2413—Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vEPSS 2.7%CVE-2014-10071—In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.EPSS 2.7%CVE-2017-7920—An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for ReEPSS 2.7%CVE-2019-19242—SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.EPSS 2.7%CVE-2001-0919—Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user whenEPSS 2.7%CVE-2005-1672—Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via thEPSS 2.7%