Vulnerabilidades em n/a
161.292 resultadosCVE-2007-5304—Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary web script or HTML viaEPSS 3.8%CVE-2014-4376—IOKit in IOAcceleratorFamily in Apple OS X before 10.9.5 allows attackers to execute arbitrary code in a privileged context or cause a deniaEPSS 3.8%CVE-2012-2429—The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecifieEPSS 3.8%CVE-2007-3607—Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service (procesEPSS 3.8%CVE-2020-35717—zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true)EPSS 3.8%CVE-2008-3164—Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote attackers to includeEPSS 3.8%CVE-2019-13955—Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticaEPSS 3.8%CVE-2018-10105—tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).EPSS 3.8%CVE-2019-19048—A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel before 5.3.9 allows attackEPSS 3.8%CVE-2022-24442—JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.EPSS 3.8%CVE-2010-2203—Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption)EPSS 3.8%CVE-2015-7649—Adobe Shockwave Player before 12.2.1.171 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unsEPSS 3.8%CVE-2014-8800—Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress EPSS 3.8%CVE-2019-16319—In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/grEPSS 3.8%CVE-2012-6624—Cross-site scripting (XSS) vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to inject arbitrary web EPSS 3.8%CVE-2021-31152—Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can enable remote access, cEPSS 3.8%CVE-2017-8417—An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device provide a username EPSS 3.8%CVE-2022-29824—In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. ThEPSS 3.8%CVE-2007-2778—Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the lEPSS 3.8%CVE-2016-4165—The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input.EPSS 3.8%