Vulnerabilidades em n/a
161.398 resultadosCVE-2009-2660—Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large wEPSS 3.6%CVE-2007-2423—Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via tEPSS 3.6%CVE-2008-0664—The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of otEPSS 3.6%CVE-2014-4944—Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticEPSS 3.6%CVE-2021-43439—RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotelyEPSS 3.6%CVE-2012-0658—Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service EPSS 3.6%CVE-2011-2107—Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 EPSS 3.6%CVE-2016-9534—tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. EPSS 3.6%CVE-2005-0959—Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path.EPSS 3.6%CVE-2009-4101—infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execuEPSS 3.6%CVE-2019-7271—Nortek Linear eMerge 50P/5000P devices have Default Credentials.EPSS 3.6%CVE-2003-0972—Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code viEPSS 3.6%CVE-2003-0609—Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LEPSS 3.6%CVE-2001-0462—Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in tEPSS 3.6%CVE-2022-32269—In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet ExploEPSS 3.6%CVE-2002-1033—Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence EPSS 3.6%CVE-2007-1110—Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. (dotEPSS 3.6%CVE-2023-27639HIGHAn issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged wEPSS 3.6%CVE-2003-1450—BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREEPSS 3.6%CVE-2007-5117—Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow remote attackers toEPSS 3.6%