Vulnerabilidades em N/A
161.138 resultadosCVE-2014-8108—The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to causeEPSS 10.0%CVE-2021-34370—Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable securitEPSS 10.0%CVE-2006-1777—Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execuEPSS 10.0%CVE-2006-1149—PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attaEPSS 10.0%CVE-1999-0951—Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.EPSS 10.0%CVE-2016-0116—Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, akEPSS 10.0%CVE-2008-1322—The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPEPSS 10.0%CVE-2021-27413—Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, whicEPSS 10.0%CVE-2008-0900—Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticatedEPSS 10.0%CVE-2021-42580—Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and auEPSS 10.0%CVE-2016-3392—The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intEPSS 10.0%CVE-2006-0899—Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via EPSS 10.0%CVE-2016-1464—Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, EPSS 10.0%CVE-2015-0320—Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before EPSS 10.0%CVE-2009-3850—Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in EPSS 10.0%CVE-2018-8780—In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries anEPSS 10.0%CVE-2018-17961—Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTEPSS 10.0%CVE-2013-6283—VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary codeEPSS 10.0%CVE-2007-2807—Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers tEPSS 10.0%CVE-2006-4019—Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary progrEPSS 10.0%