Vulnerabilidades em n/a
161.139 resultadosCVE-2007-6318—SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commandEPSS 9.2%CVE-2014-3004—The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External EntityEPSS 9.2%CVE-2013-0992—WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (meEPSS 9.2%CVE-2014-3596—The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's CEPSS 9.2%CVE-2004-2496—The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a laEPSS 9.2%CVE-2008-0623—Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to EPSS 9.2%CVE-2014-3848—The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to obtain database credeEPSS 9.1%CVE-2023-31742HIGHThere is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web managemEPSS 9.1%CVE-2002-0652—xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered EPSS 9.1%CVE-2007-6276—The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers toEPSS 9.1%CVE-2021-26937—encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or EPSS 9.1%CVE-2010-3571—Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allEPSS 9.1%CVE-2012-4431—org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to byEPSS 9.1%CVE-2015-1631—Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka EPSS 9.1%CVE-2015-1561—The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlieEPSS 9.1%CVE-2017-15662—In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a craftEPSS 9.1%CVE-2007-1700—The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considEPSS 9.1%CVE-2017-15665—In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted EPSS 9.1%CVE-2017-15664—In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a craEPSS 9.1%CVE-2007-0047—CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet ExEPSS 9.1%