Vulnerabilidades em n/a

161.247 resultados
CVE-2007-2396—The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers EPSS 6.9%CVE-2008-3246—Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before buEPSS 6.9%CVE-2007-2397—QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security contEPSS 6.9%CVE-2006-6808—Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web scriptEPSS 6.9%CVE-2015-1636—Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allowsEPSS 6.9%CVE-2017-3086—Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to aEPSS 6.9%CVE-2000-0396—The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the atEPSS 6.9%CVE-2006-3906—Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackEPSS 6.9%CVE-2011-3194—Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) anEPSS 6.9%CVE-2015-4683—Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privilegesEPSS 6.9%CVE-2012-0242—Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string sEPSS 6.9%CVE-2015-6117—Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control PEPSS 6.9%CVE-2019-11408—XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated attackers to inject arEPSS 6.9%CVE-2016-9933—Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in EPSS 6.9%CVE-2012-0231—PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote EPSS 6.9%CVE-2013-4103—Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user inputEPSS 6.9%CVE-2022-21123MEDIUMIncomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable informatiEPSS 6.9%CVE-2009-1670—user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecifEPSS 6.9%CVE-2018-0159HIGHA vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE SoftwaEPSS 6.9%KEVCVE-2015-8386—PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to caEPSS 6.9%