Vulnerabilidades em n/a

161.190 resultados
CVE-2011-2426—Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS EPSS 8.2%CVE-2014-1884—Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict navigation events, wEPSS 8.2%CVE-2018-15172—TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.EPSS 8.2%CVE-2014-0232—Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.0EPSS 8.2%CVE-2018-14336—TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addreEPSS 8.2%CVE-2011-4577—OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertiEPSS 8.2%CVE-2009-3625—Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arbitrary local files viEPSS 8.2%CVE-2021-42567—Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.EPSS 8.2%CVE-2018-6952—A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.EPSS 8.2%CVE-2016-7251—Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script EPSS 8.2%CVE-2001-1335—Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary fileEPSS 8.2%CVE-2008-5355—The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlEPSS 8.2%CVE-2007-3162—Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator (ida) 5.2 EPSS 8.2%CVE-2000-0444—HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.EPSS 8.2%CVE-1999-0057—Vacation program allows command execution by remote users through a sendmail command.EPSS 8.2%CVE-2012-4354—TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute aEPSS 8.2%CVE-2012-4355—TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute aEPSS 8.2%CVE-2006-0527—BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style EPSS 8.2%CVE-2019-10664—Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.EPSS 8.2%CVE-2019-13481—An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with AutheEPSS 8.2%