Vulnerabilidades em n/a
161.456 resultadosCVE-2013-6172—steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings EPSS 2.9%CVE-2020-17362—search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.EPSS 2.9%CVE-2018-19134—In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript documenEPSS 2.9%CVE-2021-42781—Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the EPSS 2.9%CVE-2006-0351—Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.EPSS 2.9%CVE-2022-26990—Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerabEPSS 2.9%CVE-2022-28906—TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLaEPSS 2.9%CVE-2020-11103—JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.EPSS 2.9%CVE-2011-0402—dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecEPSS 2.9%CVE-2009-0828—QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database EPSS 2.9%CVE-2013-4925—Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 alEPSS 2.9%CVE-2016-7164—The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and cEPSS 2.9%CVE-2006-0214—Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to EPSS 2.9%CVE-2006-5348—Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11EPSS 2.9%CVE-2006-5357—Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown imEPSS 2.9%CVE-2004-2710—Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly EPSS 2.9%CVE-2006-5366—Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) OracEPSS 2.9%CVE-2006-5375—Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, aEPSS 2.9%CVE-2015-3809—The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly trEPSS 2.9%CVE-2009-4230—Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to EPSS 2.9%