Vulnerabilidades em n/a
161.455 resultadosCVE-2021-32066—An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTEPSS 2.9%CVE-2007-4101—Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa paraEPSS 2.9%CVE-2005-3439—Multiple unspecified vulnerabilities in Oracle Database Server 10g up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln#EPSS 2.9%CVE-2023-31856CRITICALA command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows aEPSS 2.9%CVE-2005-2044—Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTEPSS 2.9%CVE-2004-1217—Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the targEPSS 2.9%CVE-2014-9753—confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_logiEPSS 2.9%CVE-2015-1174—Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack weEPSS 2.9%CVE-2012-3540—Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect usersEPSS 2.9%CVE-2013-1907—The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groupEPSS 2.9%CVE-2005-3576—ts.exe in Walla TeleSite 3.0 and earlier allows remote attackers to access privileged information by entering the article number in tsurl paEPSS 2.9%CVE-2022-26992—Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerabEPSS 2.9%CVE-2014-6421—Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (aEPSS 2.9%CVE-2010-0845—Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows reEPSS 2.9%CVE-2005-1754—JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the EPSS 2.9%CVE-2005-1002—logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR_FT_LANG anEPSS 2.9%CVE-2023-24278MEDIUMSquidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.EPSS 2.9%CVE-2008-6934—Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, alEPSS 2.9%CVE-2017-7861—Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c.EPSS 2.9%CVE-2013-2275—The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and PuppEPSS 2.9%