Vulnerabilidades em n/a
161.457 resultadosCVE-2012-3443—The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data duringEPSS 2.7%CVE-2009-2663—libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denEPSS 2.7%CVE-2012-1110—Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML EPSS 2.7%CVE-2006-0457—Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of sEPSS 2.7%CVE-2009-2000—Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via EPSS 2.7%CVE-2009-0041—IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x beforEPSS 2.7%CVE-2022-43552MEDIUMA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proEPSS 2.7%CVE-2007-1148—PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary PHP code via a URL EPSS 2.7%CVE-1999-0837—Denial of service in BIND by improperly closing TCP sessions via so_linger.EPSS 2.7%CVE-2014-3941—TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to hEPSS 2.7%CVE-2006-3951—PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote attackers to executEPSS 2.7%CVE-2004-0505—The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.EPSS 2.7%CVE-2006-1937—Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dEPSS 2.7%CVE-2021-23420HIGHDeserialization of Untrusted DataEPSS 2.7%CVE-2015-4538—The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x before 2.3.1.0 allows remote authenticated users to read arbitrary files or cause a dEPSS 2.7%CVE-2021-22948—Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. UnEPSS 2.7%CVE-2020-13995—U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable EPSS 2.7%CVE-2004-0504—Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.EPSS 2.7%CVE-2008-7251—libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact aEPSS 2.7%CVE-2016-10306—Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH andEPSS 2.7%