Vulnerabilidades em n/a
161.272 resultadosCVE-2014-9767—Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and EPSS 4.7%CVE-2007-6245—Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client EPSS 4.7%CVE-2015-2743—PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal WorkerEPSS 4.7%CVE-2014-2440—Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers toEPSS 4.7%CVE-2006-1102—Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the sEPSS 4.7%CVE-2010-1819—Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers,EPSS 4.7%CVE-2002-1876—Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consuEPSS 4.7%CVE-2015-8098—F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of serviEPSS 4.7%CVE-2018-15506—In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attEPSS 4.7%CVE-2016-10173—Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to EPSS 4.7%CVE-2005-1852—Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packEPSS 4.7%CVE-2008-6512—Cross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote attackers to bypass the Same Origin Policy andEPSS 4.7%CVE-2014-3429—IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arEPSS 4.7%CVE-2014-3628—Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to injEPSS 4.7%CVE-2004-1628—Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.EPSS 4.7%CVE-2015-8859—The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.EPSS 4.7%CVE-2015-4429—Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIREPSS 4.7%CVE-2016-5157—Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89EPSS 4.7%CVE-2019-10226—HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI. NOTEPSS 4.7%CVE-2014-3341—The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requestsEPSS 4.7%