Vulnerabilidades em n/a
161.281 resultadosCVE-2003-1516—The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, whiEPSS 4.3%CVE-2012-2127—fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, EPSS 4.3%CVE-2014-5181—Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attacEPSS 4.3%CVE-2013-0443—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 thEPSS 4.3%CVE-2015-4500—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attaEPSS 4.3%CVE-2019-13954—Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticEPSS 4.3%CVE-2019-6251—WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker coEPSS 4.3%CVE-2008-3075—The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exEPSS 4.3%CVE-2007-5560—Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: aEPSS 4.3%CVE-2018-4928—Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitation could lead to arbitrary EPSS 4.3%CVE-2018-18751—An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free iEPSS 4.3%CVE-1999-0493—rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn coEPSS 4.3%CVE-2017-7618—crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, andEPSS 4.3%CVE-2008-7061—The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 aEPSS 4.3%CVE-1999-0986—The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.EPSS 4.3%CVE-2011-0556—The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of serviceEPSS 4.3%CVE-2016-4591—WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackersEPSS 4.3%CVE-2009-2299—The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a EPSS 4.3%CVE-2018-12018—The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation beEPSS 4.3%CVE-2020-28035—WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.EPSS 4.3%