Vulnerabilidades em n/a

161.016 resultados
CVE-2014-1568—Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 3EPSS 16.7%CVE-2018-9843—The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via aEPSS 16.7%CVE-2012-6554—functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code EPSS 16.7%CVE-2010-1494—Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files vEPSS 16.7%CVE-2003-1275—Pocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash) via a Javascript function that uses the objeEPSS 16.7%CVE-2005-1476—Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigatEPSS 16.7%CVE-2014-1758—Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "MicrosEPSS 16.7%CVE-2017-5340—Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remEPSS 16.7%CVE-2017-6182—In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remoEPSS 16.7%CVE-2007-3175—Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft paraEPSS 16.7%CVE-2018-15140—Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patienEPSS 16.7%CVE-2012-3748—Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a deniEPSS 16.7%CVE-2011-2750—NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPEEPSS 16.7%CVE-2018-1042—Moodle 3.x has Server Side Request Forgery in the filepicker.EPSS 16.7%CVE-2012-4412—Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to causEPSS 16.7%CVE-2018-13350—SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter.EPSS 16.7%CVE-2000-1090—Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses tEPSS 16.7%CVE-2019-14378—ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the firsEPSS 16.7%CVE-2021-28918—Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeteEPSS 16.7%CVE-2016-0856—Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vecEPSS 16.7%