Vulnerabilidades em n/a
161.130 resultadosCVE-2020-24579—An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass autEPSS 10.0%CVE-2021-34370—Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable securitEPSS 10.0%CVE-2009-4427—Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files viEPSS 10.0%CVE-2012-2549—The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which allows remote attackEPSS 10.0%CVE-2006-1777—Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execuEPSS 10.0%CVE-1999-0951—Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.EPSS 10.0%CVE-2006-1149—PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attaEPSS 10.0%CVE-2015-4843—Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentialEPSS 10.0%CVE-2016-0116—Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, akEPSS 10.0%CVE-2008-1322—The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPEPSS 10.0%CVE-2021-27413—Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, whicEPSS 10.0%CVE-2008-0900—Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticatedEPSS 10.0%CVE-2021-42580—Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and auEPSS 10.0%CVE-2006-0899—Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via EPSS 10.0%CVE-2016-3392—The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intEPSS 10.0%CVE-2009-3850—Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in EPSS 10.0%CVE-2016-1464—Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, EPSS 10.0%CVE-2015-0320—Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before EPSS 10.0%CVE-2018-8780—In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries anEPSS 10.0%CVE-2018-17961—Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTEPSS 10.0%