Vulnerabilidades em n/a

161.289 resultados
CVE-2015-1914—IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "EPSS 4.0%CVE-2014-8244—Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 1625EPSS 4.0%CVE-2021-27556—The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type parEPSS 4.0%CVE-2016-3449—Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availabiEPSS 4.0%CVE-2018-19915—DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.EPSS 4.0%CVE-2014-3788—Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbiEPSS 4.0%CVE-2016-5277—Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and ThunderEPSS 4.0%CVE-2008-7249—Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbiEPSS 4.0%CVE-2007-0372—Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the EPSS 4.0%CVE-2016-5276—Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox EEPSS 4.0%CVE-2015-2223—Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly CyveEPSS 4.0%CVE-2023-50089—A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution oEPSS 4.0%CVE-2009-1443—Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors.EPSS 4.0%CVE-2011-0504—Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arEPSS 4.0%CVE-1999-0088—IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.EPSS 4.0%CVE-2013-7466—Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traverEPSS 4.0%CVE-2014-3984—Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.EPSS 4.0%CVE-2006-1951—Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafteEPSS 4.0%CVE-2008-2186—Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to inEPSS 4.0%CVE-2008-2335—Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitraEPSS 4.0%