Vulnerabilidades em n/a
161.191 resultadosCVE-2013-0630—Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x bEPSS 8.2%CVE-2013-0603—Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execEPSS 8.2%CVE-2015-8407—Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.EPSS 8.2%CVE-2015-3135—Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11EPSS 8.2%CVE-2008-4748—Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote atEPSS 8.2%CVE-2017-5881—GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact viEPSS 8.2%CVE-2012-5633—The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasseEPSS 8.2%CVE-2009-2846—The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allowsEPSS 8.2%CVE-2016-6266—ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows rEPSS 8.2%CVE-2019-18873—FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a uEPSS 8.2%CVE-2020-10967MEDIUMIn Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localparEPSS 8.2%CVE-2017-9614—The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory accEPSS 8.2%CVE-2015-0349—Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before EPSS 8.2%CVE-2019-18184—Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.EPSS 8.2%CVE-2015-2184—ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function.EPSS 8.1%CVE-2018-10184—An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size setting instead of beinEPSS 8.1%CVE-2006-0922—CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, whicEPSS 8.1%CVE-2010-0995—Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FEPSS 8.1%CVE-2003-0118—SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remotEPSS 8.1%CVE-2019-11369—An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may allEPSS 8.1%