Vulnerabilidades em n/a

161.292 resultados
CVE-2020-7753HIGHRegular Expression Denial of Service (ReDoS)EPSS 3.8%CVE-2003-0850—The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary EPSS 3.8%CVE-2017-5202—The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().EPSS 3.8%CVE-2012-3366—The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitrary commands via shelEPSS 3.8%CVE-2017-5203—The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().EPSS 3.8%CVE-2002-0953—globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execEPSS 3.8%CVE-2002-0376—Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.EPSS 3.8%CVE-2009-1203—WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own lEPSS 3.8%CVE-2003-0219—Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid sEPSS 3.8%CVE-2021-21879CRITICALA directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A speciallyEPSS 3.8%CVE-2014-3698—The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to oEPSS 3.8%CVE-2012-3485—Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable filEPSS 3.8%CVE-2012-1695MEDIUMUnspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earEPSS 3.8%CVE-2015-8873—Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote aEPSS 3.8%CVE-2018-4110—An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Web App" component. It allows remoteEPSS 3.8%CVE-2018-10381—TunnelBear 3.2.0.6 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "TunnelBearMaintenance" service. This seEPSS 3.8%CVE-2013-1466—Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTEPSS 3.8%CVE-2016-3990—Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cEPSS 3.8%CVE-2006-0208—Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackeEPSS 3.8%CVE-2014-2741—nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements,EPSS 3.8%