Vulnerabilidades em n/a
161.191 resultadosCVE-1999-1069—Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot)EPSS 8.1%CVE-2004-0687—Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c foEPSS 8.1%CVE-2002-1525—Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files EPSS 8.1%CVE-2001-0189—Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack iEPSS 8.1%CVE-2002-1656—X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via snifEPSS 8.1%CVE-2008-0763—Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows remote attackers to eEPSS 8.1%CVE-2018-20664—Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.EPSS 8.1%CVE-2003-0621—The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root vEPSS 8.0%CVE-2017-14523—WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reporEPSS 8.0%CVE-2007-4583—Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video EPSS 8.0%CVE-2015-7384—Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.EPSS 8.0%CVE-2021-38699—TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.EPSS 8.0%CVE-2017-6823—Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit actioEPSS 8.0%CVE-2012-0776—The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arEPSS 8.0%CVE-2016-0994—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before EPSS 8.0%CVE-2007-0873—nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for (1)EPSS 8.0%CVE-2009-1570—Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary cEPSS 8.0%CVE-2002-1031—KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (nEPSS 8.0%CVE-2017-2491—Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execuEPSS 8.0%CVE-2015-0202—The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a laEPSS 8.0%