Vulnerabilidades em n/a

161.395 resultados
CVE-2000-0778—IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header,EPSS 87.3%CVE-2009-3555CRITICALThe TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in thEPSS 87.3%CVE-2013-1488—The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execEPSS 87.2%CVE-2020-26948—Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.EPSS 87.2%CVE-2003-0132—A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linEPSS 87.1%CVE-2015-3864—Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 EPSS 87.1%CVE-2021-41282—diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set inEPSS 87.1%CVE-2012-1428—The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers EPSS 87.1%CVE-2012-1427—The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers EPSS 87.1%CVE-2012-0779—Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.xEPSS 87.1%CVE-2022-31706CRITICALThe vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operatiEPSS 87.1%CVE-2021-40655HIGHAn informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forEPSS 87.0%KEVCVE-2008-5416—Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SEPSS 87.0%CVE-2015-5122HIGHUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0EPSS 87.0%KEVCVE-2005-2611—VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media ServeEPSS 87.0%CVE-2013-0640HIGHAdobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cEPSS 86.9%KEVCVE-2016-6603—ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTPEPSS 86.9%CVE-2017-16894—In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct reEPSS 86.9%CVE-2018-9276HIGHAn issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console withEPSS 86.9%KEVCVE-1999-0067—phf CGI program allows remote command execution through shell metacharacters.EPSS 86.9%