Vulnerabilidades em n/a
161.276 resultadosCVE-2019-10121—eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. EPSS 4.6%CVE-2018-5725—MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of the web server.EPSS 4.6%CVE-2011-3325—ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type fielEPSS 4.6%CVE-2013-0624—Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictionsEPSS 4.6%CVE-2003-1229—X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SEPSS 4.6%CVE-2008-3260—Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTMLEPSS 4.6%CVE-2009-0909—Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 1EPSS 4.6%CVE-2019-10774—php-shellcommand versions before 1.6.1 have a command injection vulnerability. Successful exploitation could lead to arbitrary code executioEPSS 4.6%CVE-2003-1114—The Session Initiation Protocol (SIP) implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmwEPSS 4.6%CVE-2017-9049HIGHlibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulEPSS 4.6%CVE-2000-0233—SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.EPSS 4.6%CVE-2005-2459—The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote aEPSS 4.6%CVE-2009-2206—Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS befoEPSS 4.6%CVE-2017-9050HIGHlibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerabEPSS 4.6%CVE-2005-0358—EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokeEPSS 4.6%CVE-2011-0924—The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allows remote attackers toEPSS 4.6%CVE-2003-1171—Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to executEPSS 4.6%CVE-2013-1291—win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, WindEPSS 4.6%CVE-2013-4082—The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationshipEPSS 4.6%CVE-2009-2953—Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code EPSS 4.6%