Vulnerabilidades em n/a
161.457 resultadosCVE-2015-4262—The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the sessioEPSS 2.8%CVE-2021-27903—An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerability existed on sites tEPSS 2.8%CVE-2005-4448—FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintEPSS 2.8%CVE-2007-2850—The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.EPSS 2.8%CVE-2004-1036—Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier,EPSS 2.8%CVE-2018-18956—The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfEPSS 2.8%CVE-2017-18264—An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictionEPSS 2.8%CVE-2001-0792—Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.EPSS 2.8%CVE-2004-2726—HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackeEPSS 2.8%CVE-2009-1491—McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other EPSS 2.8%CVE-2004-2341—PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_paEPSS 2.8%CVE-2006-0882—Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the EPSS 2.8%CVE-2002-0610—Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privilEPSS 2.8%CVE-2011-2356—WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memoEPSS 2.8%CVE-2010-0673—SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackEPSS 2.8%CVE-2018-8000—In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a relaEPSS 2.8%CVE-2006-2491—Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attEPSS 2.8%CVE-2015-7034—The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denialEPSS 2.8%CVE-2015-6259—The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly ClEPSS 2.8%CVE-2012-4997—Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. (EPSS 2.8%