Vulnerabilidades em n/a

161.289 resultados
CVE-2017-14650—A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "conEPSS 4.0%CVE-2018-2640—Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.EPSS 4.0%CVE-2009-3372—Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafEPSS 4.0%CVE-2018-14468HIGHThe FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().EPSS 4.0%CVE-2006-1747—PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the vEPSS 4.0%CVE-2021-31862—SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.EPSS 4.0%CVE-2016-6448—A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to EPSS 4.0%CVE-2018-20677—In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.EPSS 4.0%CVE-2022-3158HIGHRockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FEPSS 4.0%CVE-2011-3005—Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cEPSS 4.0%CVE-2016-0363—The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.EPSS 4.0%CVE-2007-0183—Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTMLEPSS 4.0%CVE-2021-20139—An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon TowerEPSS 4.0%CVE-2014-4535—Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject aEPSS 4.0%CVE-2007-6532—Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code viEPSS 4.0%CVE-2007-4690—Double free vulnerability in the NFS component in Apple Mac OS X 10.4 through 10.4.10 allows remote authenticated users to execute arbitraryEPSS 4.0%CVE-2014-9143—Open redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to redirect users to arbitrary webEPSS 4.0%CVE-2021-20140—An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller_server service on Gryphon ToweEPSS 4.0%CVE-2017-3038—Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption EPSS 4.0%CVE-2005-2143—Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page.EPSS 4.0%