Vulnerabilidades em n/a
161.272 resultadosCVE-2019-19031—Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resourEPSS 5.2%CVE-2016-0959—Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.EPSS 5.2%CVE-2015-2052—Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to executEPSS 5.2%CVE-2013-0435—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, andEPSS 5.2%CVE-2019-3702—A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute EPSS 5.2%CVE-2008-2045—Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files viEPSS 5.2%CVE-2014-2279—Multiple directory traversal vulnerabilities in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allow (1) remote authenticated users with EPSS 5.2%CVE-2016-9842HIGHThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involvingEPSS 5.2%CVE-2001-0181—Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrarEPSS 5.2%CVE-2018-18805—Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.EPSS 5.2%CVE-2018-7567—In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are ablEPSS 5.2%CVE-2010-0212—OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, whEPSS 5.2%CVE-2007-1766—PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remote attackers to execEPSS 5.2%CVE-2008-1178—Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files vEPSS 5.2%CVE-2000-0753—The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (EPSS 5.2%CVE-2006-5821—Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation SeEPSS 5.2%CVE-2017-5610—wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignEPSS 5.2%CVE-2012-3990—Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, ThunderEPSS 5.2%CVE-2012-3988—Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x bEPSS 5.2%CVE-2018-19274—Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing PhaEPSS 5.2%