Vulnerabilidades em n/a
161.191 resultadosCVE-2019-11369—An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may allEPSS 8.1%CVE-2009-3704—ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INEPSS 8.1%CVE-2007-3956—TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackerEPSS 8.1%CVE-2001-0705—Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web EPSS 8.1%CVE-2018-11415—SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reporteEPSS 8.1%CVE-2017-1000254—libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymoEPSS 8.1%CVE-2004-1620—CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expecEPSS 8.1%CVE-2014-0191—The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion EPSS 8.1%CVE-2012-4387—Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which isEPSS 8.1%CVE-2018-13330—System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands during group creationEPSS 8.1%CVE-2004-2219—Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an inEPSS 8.1%CVE-2002-0112—Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.EPSS 8.1%CVE-2015-6838—The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxmlEPSS 8.1%CVE-2006-4954—The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify iEPSS 8.1%CVE-2006-4952—The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between diffeEPSS 8.1%CVE-2006-4204—Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP codEPSS 8.1%CVE-2014-0983—Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py inEPSS 8.1%CVE-2006-4477—Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute arbitrary PHP code vEPSS 8.1%CVE-2006-2073—Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, aEPSS 8.1%CVE-2014-2616—Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive informaEPSS 8.1%