Vulnerabilidades em n/a
161.057 resultadosCVE-2022-31788—IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.EPSS 14.7%CVE-2010-4228—Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arEPSS 14.7%CVE-2011-1258—Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitiEPSS 14.6%CVE-2011-1511—Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to eEPSS 14.6%CVE-2015-2475—Cross-site scripting (XSS) vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and EPSS 14.6%CVE-2010-2089—The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows contEPSS 14.6%CVE-2015-3077—Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIREPSS 14.6%CVE-2011-0951—The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remoteEPSS 14.6%CVE-2007-5728—Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web scrEPSS 14.6%CVE-2004-1120—Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and EPSS 14.6%CVE-2008-0726—Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to thEPSS 14.6%CVE-2002-0842—Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracle9i Application ServEPSS 14.6%CVE-2009-2692—The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in protEPSS 14.6%CVE-2006-0029—Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attEPSS 14.6%CVE-2009-3663—Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of seEPSS 14.6%CVE-2015-1661—Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "InternEPSS 14.6%CVE-2000-0524—Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such aEPSS 14.6%CVE-2010-1489—The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to conEPSS 14.6%CVE-2010-5300—Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execuEPSS 14.6%CVE-2016-1897—FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live StrEPSS 14.6%