Vulnerabilidades em n/a

161.399 resultados
CVE-2017-13690—The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.EPSS 3.4%CVE-2017-13023—The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().EPSS 3.4%CVE-2012-5049—APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformedEPSS 3.4%CVE-2021-40219—Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject servEPSS 3.4%CVE-2017-13045CRITICALThe VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().EPSS 3.4%CVE-2017-13049—The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().EPSS 3.4%CVE-2008-3509—LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, whicEPSS 3.4%CVE-2014-9241—Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attackers to inject arbitrEPSS 3.4%CVE-2017-13030—The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.EPSS 3.4%CVE-2017-13029—The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().EPSS 3.4%CVE-2016-5020—F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration EPSS 3.4%CVE-2017-13052—The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().EPSS 3.4%CVE-2008-6702—S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via a long nickname, whiEPSS 3.4%CVE-2003-1407—Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.EPSS 3.4%CVE-2015-7994—The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors EPSS 3.4%CVE-2018-15664—In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with DirectorEPSS 3.4%CVE-2018-20752—An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifiEPSS 3.4%CVE-2015-4104—Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of EPSS 3.4%CVE-2021-45422—Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameterEPSS 3.4%CVE-2012-2392—Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors relateEPSS 3.4%