Vulnerabilidades em n/a
161.083 resultadosCVE-2006-1618—Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackerEPSS 13.5%CVE-2019-9581—phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicoEPSS 13.5%CVE-2007-5330—The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execEPSS 13.5%CVE-2017-6444—The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whicEPSS 13.5%CVE-2016-1000282—Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable EPSS 13.5%CVE-2018-4237—An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affectEPSS 13.5%CVE-2022-23347—BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.EPSS 13.5%CVE-2002-0651—Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to EPSS 13.5%CVE-2016-0018—Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows loEPSS 13.5%CVE-2022-25216—An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user accountEPSS 13.5%CVE-2019-20445—HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a TrEPSS 13.5%CVE-2007-4040HIGHArgument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers EPSS 13.5%CVE-2015-7241—XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.EPSS 13.5%CVE-2015-1764—The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy aEPSS 13.5%CVE-2017-16934—The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.htEPSS 13.5%CVE-2007-0222—Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to readEPSS 13.5%CVE-2020-13700—An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permaliEPSS 13.5%CVE-2001-0021—MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template EPSS 13.5%CVE-2000-0941—Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameteEPSS 13.5%CVE-2016-0138—Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and EPSS 13.5%