Vulnerabilidades em n/a
161.457 resultadosCVE-2020-8283—An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versionEPSS 2.7%CVE-2017-6460—Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecEPSS 2.7%CVE-2020-8269—An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixEPSS 2.7%CVE-2014-5140—The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) charaEPSS 2.7%CVE-2019-14981—In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It alloEPSS 2.7%CVE-2007-6496—Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp wEPSS 2.7%CVE-2002-0046—Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packeEPSS 2.7%CVE-2020-28072—A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary EPSS 2.7%CVE-2022-46340HIGHA vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extensionEPSS 2.7%CVE-2013-7424—The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to EPSS 2.7%CVE-2019-13027—Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via EPSS 2.7%CVE-2012-6271—Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie thEPSS 2.7%CVE-2009-5141—Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) viEPSS 2.7%CVE-2003-1325—The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated EPSS 2.7%CVE-2017-13737—There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of serviceEPSS 2.7%CVE-2006-5263—Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbEPSS 2.7%CVE-2008-1120—Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbiEPSS 2.7%CVE-2020-0225—In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to a missing bounds chEPSS 2.7%CVE-2017-11104—Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valEPSS 2.7%CVE-2022-38812—AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.EPSS 2.7%