Vulnerabilidades em n/a
161.398 resultadosCVE-2023-26134CRITICALVersions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfoEPSS 3.6%CVE-2019-5087HIGHAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.EPSS 3.6%CVE-2010-1757—WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAMEPSS 3.6%CVE-2007-0620—download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensiEPSS 3.6%CVE-2007-4894—Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execuEPSS 3.6%CVE-2012-2048—Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors.EPSS 3.6%CVE-2012-2750—Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOEPSS 3.6%CVE-2011-3328—The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denEPSS 3.6%CVE-2012-1839—Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.xEPSS 3.6%CVE-2006-1458—Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute arbitrary code via a crafted JPEG image.EPSS 3.6%CVE-1999-0440—The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.EPSS 3.6%CVE-2018-19783—Kentix MultiSensor-LAN 5.63.00 devices and previous allow Authentication Bypass via an Alternate Path or Channel.EPSS 3.6%CVE-2016-10129—The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL EPSS 3.6%CVE-2006-6628—Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (application crash) via a crEPSS 3.6%CVE-2010-0848—Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_2EPSS 3.6%CVE-2013-5582—Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers tEPSS 3.6%CVE-2016-9480—libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed EPSS 3.6%CVE-2019-15324—The ad-inserter plugin before 2.4.22 for WordPress has remote code execution.EPSS 3.6%CVE-2022-30513—School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:125EPSS 3.6%CVE-2001-1161—Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL thatEPSS 3.6%