Vulnerabilidades em n/a
161.242 resultadosCVE-2020-20601—An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.EPSS 7.4%CVE-2009-1022—Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remoEPSS 7.4%CVE-2002-0240—PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full patEPSS 7.4%CVE-2021-31537—SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rEPSS 7.4%CVE-2015-5754—Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to exeEPSS 7.4%CVE-2017-12932—ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing uEPSS 7.4%CVE-2012-0131—Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or EPSS 7.4%CVE-2006-1346—Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execEPSS 7.4%CVE-2016-4629—ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via EPSS 7.4%CVE-2014-0429—Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote EPSS 7.4%CVE-2011-4043—Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows EPSS 7.4%CVE-2015-4127—Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary wEPSS 7.4%CVE-2005-3526—Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrarEPSS 7.4%CVE-2015-0516—Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to reaEPSS 7.4%CVE-2002-0236—Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authenticaEPSS 7.4%CVE-2022-37454CRITICALThe Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers toEPSS 7.4%CVE-2005-1679—Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error mEPSS 7.4%CVE-2007-6253—Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectorEPSS 7.4%CVE-2008-6912—Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/hoEPSS 7.4%CVE-2014-2009—The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitivEPSS 7.4%