Vulnerabilidades em n/a
161.456 resultadosCVE-2014-1349—Use-after-free vulnerability in Safari in Apple iOS before 7.1.2 allows remote attackers to execute arbitrary code or cause a denial of servEPSS 2.9%CVE-2002-0331—Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot doEPSS 2.9%CVE-2018-18983—VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-baseEPSS 2.9%CVE-2018-5996—Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory cEPSS 2.9%CVE-2017-5209—The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from procesEPSS 2.9%CVE-2008-0520—Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arEPSS 2.9%CVE-2013-0242—Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, alloEPSS 2.9%CVE-2014-3358—Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.1EPSS 2.9%CVE-2022-26996—Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd,EPSS 2.9%CVE-2022-26995—Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pEPSS 2.9%CVE-2014-3357—Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.1EPSS 2.9%CVE-2014-4271—Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availEPSS 2.9%CVE-2015-4703—Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to EPSS 2.9%CVE-2004-0403—Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length fEPSS 2.9%CVE-2011-2720—The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackerEPSS 2.9%CVE-2017-18026—Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg prograEPSS 2.9%CVE-2016-9924—Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.EPSS 2.9%CVE-2008-5608—ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download tEPSS 2.9%CVE-2014-8585—Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files viaEPSS 2.9%CVE-2021-33561—A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML vEPSS 2.9%